Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-50367

A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript.

Published

2025-06-27T16:15:25.263

Last Modified

2025-07-01T18:14:15.680

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application anujk305 medical_card_generation_system 1.0 Yes
References