CVE-2024-48170

Moderate 5.4

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the profile.php.

Published February 10, 2025.