Beveiligingsadvies

CVE-2025-45015

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-30 00:00:00
Laatst bijgewerkt 2025-05-06 15:27:36
Toegewezen door mitre
CVSS-score 6.1
Status PUBLISHED

Beschrijving

A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters.