PT-2025-37336 · Unknown · Phpgurukul Online Shopping Portal

Published 2025-09-12 · Updated 2025-09-18 · CVE-2025-52074

Positive Technologies · (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Online Shopping Portal version 2.1

Description: PHPGURUKUL Online Shopping Portal version 2.1 is susceptible to Cross Site Scripting (XSS) due to insufficient input sanitization. The issue occurs in the quantity parameter when a product is added to the cart.

Recommendations: Sanitize the quantity parameter when adding a product to the cart.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-52074

Affected Products

Phpgurukul Online Shopping Portal

References · 8

• 🔥 https://github.com/NullMinds/CVE-Hunting/blob/main/Online%20Shopping%20Portal/Stored%20XSS%20in%20Quantity%20Parameter.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52074 · Security Note
• https://osv.dev/vulnerability/CVE-2025-52074 · Vendor Advisory
• https://t.me/cveNotify/135325 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1966593018305130596 · Twitter Post
• https://t.me/CVEtracker/32398 · Telegram Post
• https://t.me/cveNotify/135882 · Telegram Post
• https://twitter.com/CVEnew/status/1966545121136070844 · Twitter Post