CVE-2025-56254

MEDIUM 4.3CVE-2025-56254 · Published 02/09/2025 · updated 17/06/2026

In short

CVE-2025-56254 is a MEDIUM (CVSS 4.3) vulnerability affecting employee leave management system (phpgurukul).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
employee leave management system phpgurukul	`= 2.1`	No fix yet

Description

PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users.

References

rishb0/CVEs-Assigned · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free