medium5.4Public exploit code
CVE-2020-25270
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hostel Management System 2.1 - Cross Site Scripting (Multiple Fields)2020-10-19 · webapps · php
Impact
PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Hostel Management System | Version 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/159614/Hostel-Management-System-2.1-Cross-Site-Scripting.html
- https://github.com/Ko-kn3t/CVE-2020-25270
- https://phpgurukul.com
- http://packetstormsecurity.com/files/159614/Hostel-Management-System-2.1-Cross-Site-Scripting.html
- https://github.com/Ko-kn3t/CVE-2020-25270
- https://phpgurukul.com