CVE-2025-11390 — Cross-site Scripting in Cyber Cafe Management System

CWE-79 — Cross-site ScriptingCWE-94 — Code Injection3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.0%
top 85.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Cyber Cafe Management System
Timeline
PublishedOct 7

Description

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter Handler. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
PHPGurukul Cyber Cafe Management System POST Parameter search.php cross site scripting↗2025-10-07
▶
GHSA
GHSA-fw46-27g2-vm4h: A weakness has been identified in PHPGurukul Cyber Cafe Management System 1↗2025-10-07
▶