Vulnerability · Published Jul 18, 2025 · Assigned by VulDB
CVE-2025-7791PHPGurukul Online Security Guards Hiring System search.php cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Online Security Guards Hiring System from PHPGurukul. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHPGurukul | Online Security Guards Hiring System | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-316852 | PHPGurukul Online Security Guards Hiring System search.php cross site scripting vdb-entry, technical-description
- VDB-316852 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #616217 | PHPGurukul Online Security Guards Hiring System V1.0 Improper Neutralization of Alternate XSS Syntax third-party-advisory
- https://github.com/i-Corner/cve/issues/9 exploit, issue-tracking
- https://phpgurukul.com/ product