CVE-2025-57151 is a Cross Site Scripting (CWE-79) vulnerability affecting phpgurukul Complaint Management System 2.0. The issue exists in the admin/userprofile.php file where the fullname parameter is not properly sanitized, allowing an attacker with low privileges to inject malicious scripts. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no user interaction required, and impacts to confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to arbitrary script execution in the context of the vulnerable application, potentially resulting in data theft, session hijacking, or disruption of service. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector. However, there are no known exploits in the wild currently.

No official patch or remediation is currently available for this vulnerability. Users of phpgurukul Complaint Management System 2.0 should monitor vendor advisories for updates. In the meantime, applying input validation and output encoding on the fullname parameter in admin/userprofile.php may reduce risk. Avoid exposing the vulnerable interface to untrusted users if possible.