CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.7. It affects Java.
CVE
CVE-2025-63611
Severity
HIGH
CVSS
8.7
EPSS
0.26%
Java
Original NVD Description
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)