CVE-2025-28015

CVE-2025-28015 describes an HTML Injection in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. The vulnerability allows an attacker to inject HTML via the fname, lname, and contact parameters, with a local attack vector, requiring user inte...