CVE-2026-6162: PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting
A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6162?
CVE-2026-6162 is classified as a cross-site scripting (XSS) vulnerability, which could potentially allow attackers to execute malicious scripts in the context of a user's browser.
How do I fix CVE-2026-6162?
To mitigate CVE-2026-6162, validate and sanitize the 'fromdate' input in the bwdates-reports-details.php file to prevent execution of unsafe scripts.
Which version of PHPGurukul Visitor Management System is affected by CVE-2026-6162?
CVE-2026-6162 affects PHPGurukul Visitor Management System version 2.0.
What is the exploitation impact of CVE-2026-6162?
Successful exploitation of CVE-2026-6162 can lead to unauthorized access and manipulation of user session data.
Are there any known workarounds for CVE-2026-6162?
Currently, the recommended workaround for CVE-2026-6162 is to apply input validation and escaping on output in the impacted PHP file.