CVE-2026-19207: PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting
A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19207?
The severity of CVE-2026-19207 is rated as low, with a score of 2.4.
What type of vulnerability is identified in CVE-2026-19207?
CVE-2026-19207 is identified as a cross-site scripting (XSS) vulnerability.
How can CVE-2026-19207 be exploited?
CVE-2026-19207 can be exploited by manipulating the 'fullname' argument in the '/manage-newvisitors.php' file.
What is the impact of CVE-2026-19207 on the system?
The impact of CVE-2026-19207 includes potential code injection and the possibility of executing arbitrary scripts in the user's browser.
How can I mitigate the risks associated with CVE-2026-19207?
To mitigate the risks of CVE-2026-19207, ensure proper input validation and sanitization for the 'fullname' argument.