high7.1
CVE-2025-50484
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.
Impact
Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Small Crm | Version 3.0 |