Security Advisory
CVE-2025-50367
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.