PT-2025-26269 · Unknown · Phpgurukul Notice Board System

Anzil · Published 2025-06-20 · Updated 2025-06-21 · CVE-2025-6301

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHPGurukul Notice Board System version 1.0

Description A problematic issue has been found in the PHPGurukul Notice Board System, affecting the file /admin/manage-notices.php of the Add Notice component. The manipulation of the Title and Description arguments leads to cross-site scripting. The attack may be initiated remotely.

Recommendations For PHPGurukul Notice Board System version 1.0, consider disabling the Add Notice component until a patch is available to prevent cross-site scripting attacks. Restrict access to the /admin/manage-notices.php file to minimize the risk of exploitation. Avoid using the Title and Description arguments in the affected component until the issue is resolved.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-6301

Affected Products

Phpgurukul Notice Board System

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-6301 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6301 · Vendor Advisory
• https://twitter.com/CVEnew/status/1936472575896379537 · Twitter Post
• https://vuldb.com/?ctiid.313301 · Note
• https://twitter.com/VulmonFeeds/status/1935906039578124675 · Twitter Post
• https://phpgurukul.com · Note
• https://vuldb.com/?id.313301 · Note
• https://t.me/cvenotify/126205 · Telegram Post
• https://vuldb.com/?submit.595373 · Note
• https://t.me/cvetracker/26614 · Telegram Post