PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.

Published Nov 17, 2025 · Updated Nov 17, 2025 · Assigned by mitre