| Package | Affected versions | Patched versions |
|---|---|---|
| hostel management system | = 2.1 |
Cross-Site Scripting in phpgurukul Hostel Management System v2.1 user-provided complaint fields (Explain the Complaint) submitted via /register-complaint.php are stored and rendered unescaped in the admin viewer (/admin/complaint-details.php?cid=<id>). When an administrator opens the complaint, injected HTML/JavaScript executes in the admin's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free