medium5.4
CVE-2025-57576
PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.
Impact
PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgurukul | Online Shopping Portal | Version 2.1 |