CVE-2025-7925: PHPGurukul Online Banquet Booking System login.php cross site scripting
A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument userlogin/userpassword leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7925?
CVE-2025-7925 is classified as a problematic vulnerability affecting PHPGurukul Online Banquet Booking System.
How does CVE-2025-7925 affect the application?
CVE-2025-7925 allows for cross-site scripting (XSS) through manipulation of the user_login and userpassword parameters in the /admin/login.php file.
How do I fix CVE-2025-7925?
To fix CVE-2025-7925, sanitize and validate user inputs in the /admin/login.php file to protect against XSS attacks.
Which versions of PHPGurukul Online Banquet Booking System are affected by CVE-2025-7925?
CVE-2025-7925 affects version 1.0 of PHPGurukul Online Banquet Booking System.
What type of vulnerability is CVE-2025-7925?
CVE-2025-7925 is a cross-site scripting (XSS) vulnerability.