CVE-2025-5972

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection CWE-476 — NULL Pointer Dereference4 documents4 sources

Severity

4.8MEDIUM

EPSS

0.2%

top 64.11%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Phpgurukul Restaurant Table Booking System

Timeline

PublishedJun 10

Description

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5phpgurukul/restaurant_table_booking_system1.0

▶NVDphpgurukul/restaurant_table_booking_system1.0

🔴Vulnerability Details

CVEList

PHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting↗2025-06-10

▶

GHSA

GHSA-x7pm-2wpr-q9mh: A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1↗2025-06-10

▶

📋Vendor Advisories

Microsoft

Kernel: the nfta_inner_num and nfta_expr_name netlink attributes accessed without checking its presence in nft_inner.c↗2023-11-14

▶