PHPGurukul Student Record System version 3.20 contains a Cross Site Scripting (XSS) vulnerability via the adminname and aemailid parameters in the /admin-profile.php page. This vulnerability allows an attacker to inject malicious scripts that could be executed in the context of the victim's browser session.