The vulnerability CVE-2025-50490 affects PHPGurukul Student Result Management System v2.0. It arises from improper session invalidation in the /elms/emp-changepassword.php component. This flaw can be exploited by attackers to hijack user sessions, potentially disrupting availability. The CVSS 3.1 base score is 7.5 (high), with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability. No known exploits in the wild or patches have been reported as of the publication date.

An attacker can hijack sessions due to improper session invalidation, which can lead to denial of service or disruption of availability for legitimate users. Confidentiality and integrity impacts are not indicated by the CVSS vector. The vulnerability affects availability (high impact).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected component and implementing additional session management controls if possible.