CVE-2025-2084 — Cross-site Scripting in Human Metapneumovirus Testing Management System

CWE-79 — Cross-site ScriptingCWE-94 — Code InjectionCWE-532 — Log File Information Exposure4 documents4 sources
Severity
5.1MEDIUMNVD
EPSS
0.1%
top 67.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Phpgurukul Human Metapneumovirus Testing Management SystemPhpgurukul Human Metapneumovirus
Timeline
PublishedMar 7

Description

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /search-report.php of the component Search Report Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-hr4f-r8pm-3573: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1↗2025-03-07
▶
CVEList
PHPGurukul Human Metapneumovirus Testing Management System Search Report Page search-report.php cross site scripting↗2025-03-07
▶

📋Vendor Advisories

1
Microsoft
sensitive data exposure in cloud-init logs↗2023-04-11
▶
CVE-2025-2084 — Cross-site Scripting | cvebase