cvedb.io
CVE-2025-45007
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2025-04-30T13:15:49.310 · Last modified 2026-06-17T09:25:20.163

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter.

Affected products

phpgurukul — time_table_generator_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when phpgurukul ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.