Security Advisory

CVE-2025-28016

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-30 00:00:00

Last updated 2025-09-30 19:29:13

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters.

← Browse all CVEs View on cve.org ↗