PHPGurukul Student Record System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in PHPGurukul Student Record System version 3.20. The issue arises in the admin-profile.php file, where the adminname and aemailid parameters can be manipulated to inject malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, log into the admin panel and navigate to the profile update section. Inject a script payload into the adminname and aemailid fields. Once the profile is updated, the injected script will be executed, demonstrating the cross-site scripting vulnerability.