CVE-2025-7856
Severity CVSS v4.0:
MEDIUM
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
19/07/2025
Last modified:
22/07/2025
Description
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pass-details.php of the component HTTP POST Request Handler. The manipulation of the argument visname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Impact
Base Score 4.0
5.10
Severity 4.0
MEDIUM
Base Score 3.x
3.50
Severity 3.x
LOW
Base Score 2.0
4.00
Severity 2.0
MEDIUM