Security Advisory

CVE-2025-63611

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-08 00:00:00

Last updated 2026-01-08 16:37:29

Assigner mitre

State PUBLISHED

Description

Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admins browser.

← Browse all CVEs View on cve.org ↗