CoreCVE
Back

MEDIUM

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php

Published Jun 27, 2025

Description

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 27, 2025
Updated Jun 27, 2025
Reserved Jun 16, 2025
Link CVE-2025-50367
CISA Vulnrichment
Updated Jun 27, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-50367
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-50367
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a