CVE-2025-5972

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/manage-subadmins.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

• CWE-79
• CWE-94

• https://github.com/kakalalaww/CVE/issues/5Exploit, Issue Tracking, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.311850Permissions Required, VDB Entry
• https://vuldb.com/?id.311850Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.592340Third Party Advisory, VDB Entry

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59714In Internet2 Grouper 5.17.1 before 5.20.5, group admins who …4.9
• CVE-2025-59715SMSEagle before 6.11 allows reflected XSS via a username or …5.4
• CVE-2025-59716ownCloud Guests before 0.12.5 allows unauthenticated user en…5.3
• CVE-2025-59717In the @digitalocean/do-markdownit package through 1.16.1 (i…9.8
• CVE-2025-59718A improper verification of cryptographic signature vulnerabi…9.8
• CVE-2025-59719An improper verification of cryptographic signature vulnerab…9.8
• CVE-2025-59720Rejected reason: Not used
• CVE-2025-59721Rejected reason: Not used
• CVE-2025-59722Rejected reason: Not used
• CVE-2025-59723Rejected reason: Not used
• CVE-2025-59724Rejected reason: Not used
• CVE-2025-59725Rejected reason: Not used