Vulnerability · Published Aug 7, 2026 · Assigned by VulDB
CVE-2026-19207PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting
Low 2.4
In plain English
A low-severity cross-site scripting in Company Visitor Management System from PHPGurukul. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This issue affects some unknown processing of the file /manage-newvisitors.php. The manipulation of the argument fullname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PHPGurukul | Company Visitor Management System | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-386952 | PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting vdb-entry, technical-description
- VDB-386952 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-19207 | CVE Analysis and Report third-party-advisory
- Submit #864845 | PHPGurukul Company Visitor Management System PHP V2.0 Stored Cross-Site Scripting (CWE-79) third-party-advisory
- https://github.com/mzxqqwq/CVE/issues/3 exploit, issue-tracking
- https://phpgurukul.com/ product