mhsinj/CVE-2025-45805

mhsinj/CVE-2025-45805

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Poc Of CVE-2025-45805
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-45805↗
7.6 HIGH—

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.