CVE-2025-45015 — Cross-site Scripting in Park Ticketing Management System

CWE-79 — Cross-site ScriptingCWE-476 — NULL Pointer Dereference4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 60.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Park Ticketing Management System
Timeline
PublishedApr 30

Description

A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2025-45015: A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details↗2025-04-30
▶
GHSA
GHSA-5c2r-7vmq-r33f: A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details↗2025-04-30
▶

📋Vendor Advisories

1
Microsoft
drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()↗2024-09-10
▶