We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-6162

CVE-2026-6162

PHP

Severity: LOW
CVSS: 3.5CVSS
Published: 2026-04-13
Last modified: 2026-04-13
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CWE: CWE-79CWE-94

Description

A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

References

https://github.com/f1rstb100d/CVE/issues/44
https://phpgurukul.com/
https://vuldb.com/submit/797171
https://vuldb.com/vuln/357048
https://vuldb.com/vuln/357048/cti

Summary

Description

References