CVE-2025-9834

Publication date

2025-09-02 21:02:11

Family

VulDB

State

PUBLISHED

Description

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.