This vulnerability affects PHPGurukul Company Visitor Management System 2.0, specifically in the /bwdates-reports-details.php file. The 'fromdate' argument can be manipulated to perform a cross-site scripting attack, enabling an attacker to inject and execute arbitrary scripts in the context of the affected application. The vulnerability is remotely exploitable without requiring privileges and does not require user interaction to initiate the attack. The CVSS 4.0 base score is 5.1, indicating medium severity.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to session hijacking, defacement, or redirection to malicious sites. However, the impact is limited by the medium severity score and the requirement for the attacker to deliver a crafted URL or input to the vulnerable parameter. No known exploits in the wild have been reported.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisory channels for updates. As a temporary measure, input validation and output encoding on the 'fromdate' parameter should be implemented to prevent script injection. Avoid clicking on suspicious links that may exploit this vulnerability until a fix is released.