CVE-2025-9834: PHPGurukul Small CRM registration.php cross site scripting
A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9834?
CVE-2025-9834 is classified as a high severity vulnerability due to the potential for remote exploitation through cross-site scripting.
How do I fix CVE-2025-9834?
To fix CVE-2025-9834, ensure proper input validation and sanitization for the Username argument in the /registration.php file.
What software is affected by CVE-2025-9834?
CVE-2025-9834 affects PHPGurukul Small CRM version 4.0.
Can CVE-2025-9834 be exploited remotely?
Yes, CVE-2025-9834 can be exploited remotely by manipulating the Username argument.
What type of vulnerability is CVE-2025-9834?
CVE-2025-9834 is a cross-site scripting (XSS) vulnerability.