CVE-2025-6301 - PHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting

Back Back to CVE browser

MEDIUM

PHPGurukul Notice Board System Add Notice manage-notices.php cross site scripting

Published Jun 20, 2025

4.8

MEDIUM

CVSS 4.0

EPSS 0.26%

Description

A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor PHP Gurukul Product Notice Board System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PHP Gurukul

Notice Board System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18715
Advisory
https://phpgurukul.com/
product
https://vuldb.com/?ctiid.313301
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.313301
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.595373
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18715		Advisory
https://phpgurukul.com/		product
https://vuldb.com/?ctiid.313301		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.313301		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.595373		third-party-advisoryThird Party AdvisoryVDB Entry