A cross-site scripting (XSS) vulnerability exists in PHPGurukul Hostel Management System 2.1 in the /register-complaint.php file via manipulation of the cdetails argument. The flaw can be exploited remotely and an exploit has been published. The vulnerability has a low CVSS score of 3.5, indicating limited impact.