CVE-2025-2645

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Mar 23, 2025
Updated: Apr 2, 2025
CWE ID 94
CWE ID 79

Summary

CVE-2025-2645 is a newly disclosed vulnerability affecting the PHPGurukul Art Gallery Management System version 1.0. This issue is classified as problematic and involves an unknown function in the /product.php file. The vulnerability allows an attacker to conduct cross-site scripting attacks by manipulating the artname argument. The exploit can be executed remotely, increasing the risk to affected systems. Public disclosure of the exploit means that attackers may already be targeting this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Phpgurukul Art Gallery Management System

Affected Vendors

  • Phpgurukul

Advisories, Assessments, and Mitigations