CVE-2025-61255

Published October 21st, 2025

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.

nikhilpatidar01/CVE-Assigned-Reports

Security advisories, CVE write-ups, and PoC reports for vulnerabilities responsibly disclosed by Nikhil Patidar. Includes technical details, affected products, impact analysis, and public references for each CVE report.

GitHub