CVE-2025-28015

Published: 2025-03-13T16:15Z

Last Modified: 2025-03-28T19:49Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt