CVEvulnerability

CVE-2025-45805

7.6 HIGH Published 2025-09-03 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2025-09-03
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Weaknesses: CWE-79

Description

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.

Affected configurations

• phpgurukul doctor appointment management system 1.0.0

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://github.com/mhsinj/CVE-2025-45805 Third Party Advisory
https://github.com/mohammed-alsaqqaf/CVE-2025-45805 github.com
https://phpgurukul.com/doctor-appointment-management-system-using-php-and-mysql Product

CVE-2025-45805

Description

Affected configurations

Related

Weakness · CWE (1)

References