CVE-2025-50492 describes an improper session invalidation vulnerability in PHPGurukul e-Diary Management System v1, specifically in the /edms/change-password.php component. This vulnerability enables attackers to hijack user sessions by exploiting the failure to properly invalidate sessions during password changes. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and impact limited to availability. No patch or official remediation has been documented in the provided data.

Successful exploitation of this vulnerability can lead to session hijacking, allowing attackers to maintain or gain unauthorized access to user sessions. The CVSS vector indicates no confidentiality or integrity impact but a high impact on availability, which may reflect disruption of service or session management. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific mitigations or temporary fixes are documented in the provided information.