PHPGurukul Online Shopping Portal Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in PHPGurukul Online Shopping Portal version 2.0. The issue arises in the 'my-cart.php' file, where the quantity parameter can be manipulated to inject JavaScript code.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, inject JavaScript code into the quantity parameter while accessing 'my-cart.php'.

Added: Nov 17, 2025, 8:23 PM
Updated: Nov 17, 2025, 8:23 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
1.7
exploitability
7.9
remediation
0.0
relevance
1.1
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.