BaseFortify

Publication date: 2025-10-21

Last updated on: 2025-10-23

Assigner: MITRE

Description

Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-21

Last Modified

2025-10-23

Generated

2026-07-06

AI Q&A

2025-10-21

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61255

EUVD

EUVD-2025-35211

Affected Vendors & Products

Vendor	Product	Version / Range
phpgurukul	bank_locker_management_system	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cross-Site Scripting (XSS) issue in the Bank Locker Management System by PHPGurukul. It occurs via the /search parameter, where the system does not properly sanitize user input, allowing attackers to inject arbitrary HTML and JavaScript code.

Impact Analysis

The vulnerability can lead to information disclosure and user redirection, meaning attackers could steal sensitive information or redirect users to malicious websites.

Hi! I’m here to help you understand CVE-2025-61255. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70