CVE-2026-0730

MEDIUM 4.8CVE-2026-0730 · Published 08/01/2026 · updated 17/06/2026

In short

CVE-2026-0730 is a MEDIUM (CVSS 4.8) vulnerability affecting staff leave management system (phpgurukul).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
staff leave management system phpgurukul	`= 1.0`	No fix yet

Description

A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UPDATE_STAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profile_pic can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

References

rsecroot/Staff-Leave-Management-System · Exploit
phpgurukul.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free