CVE-2025-7926: Cross Site Scripting in PHPGurukul Online Banquet Booking System
A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This affects an unknown part of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2025-7926: Cross Site Scripting in PHPGurukul Online Banquet Booking System
Description
A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This affects an unknown part of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- VulDB
- Date Reserved
- 2025-07-21T06:25:52.062Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 687e4822a83201eaac0ff584
Added to database: 7/21/2025, 2:01:06 PM
Last updated: 7/21/2025, 2:01:06 PM
Views: 1
Related Threats
CVE-2025-7624: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sophos Sophos Firewall
CriticalCVE-2025-7382: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Sophos Sophos Firewall
HighCVE-2025-6704: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Sophos Sophos Firewall
CriticalCVE-2025-7921: CWE-121 Stack-based Buffer Overflow in ASKEY RTF8207w
CriticalCVE-2025-25287: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in lakejason0 mediawiki-skins-Lakeus
MediumActions
Need enhanced features?
Contact root@offseq.com for Pro access with improved analysis and higher rate limits.