PHPGurukul Complaint Management System 2.0 contains a SQL Injection vulnerability in the fromdate and todate parameters of the between-date-userreport.php script. This flaw allows an unauthenticated attacker to inject malicious SQL code, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level. No official patch or remediation information is currently available.