CVE-2025-7941: PHPGurukul Time Table Generator System profile.php cross site scripting
A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7941?
CVE-2025-7941 is classified as a problematic vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-7941?
To fix CVE-2025-7941, sanitize and validate user inputs in the adminname argument to prevent XSS.
Which software is affected by CVE-2025-7941?
CVE-2025-7941 affects PHPGurukul Time Table Generator System version 1.0.
What type of attack can be performed via CVE-2025-7941?
CVE-2025-7941 allows for cross-site scripting attacks through the manipulation of the adminname parameter.
Is CVE-2025-7941 easy to exploit?
Yes, CVE-2025-7941 can be easily exploited if the input is not properly handled.