CVE-2025-9017
A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-foreigner-ticket.php. The manipulation of the argument visitorname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Analyzed - cna@vuldb.com
- Published
- 2025-08-15
- Last modified
- 2025-08-15
- Weaknesses
- CWE-79, CWE-94
Affected products
References
- https://github.com/xiguala123/myCVE/issues/7
- https://phpgurukul.com/
- https://vuldb.com/?ctiid.320068
- https://vuldb.com/?id.320068
- https://vuldb.com/?submit.629562
