2 matches found
CVE-2024-51225: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the brandname parameter...
4.8CVSS6AI score0.00184EPSS
SaveExploits1References1
CVE-2025-44181: Improper Neutralization of Input During Web Page Generation
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/add-brand.php via the brandname parameter...
6.1CVSS5.8AI score0.00287EPSS
SaveExploits1References1
20