Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-48170 EUVD-2025-4790GHSA-mp4p-vfgp-m87p

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.

Published Feb 10, 2025 · Updated Feb 18, 2025 · Assigned by mitre