CVE-2025-9656 — Vulnerability intelligence

phpgurukul — directory management system

Published: 2025-08-29T16:15:37.900

CVSS

2.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unknown code of the file /admin/add-directory.php. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Sources

• CVE-2025-9656
• Exploit, Issue Tracking
• Product
• Permissions Required, VDB Entry
• Third Party Advisory, VDB Entry
• Third Party Advisory, VDB Entry