CVE-2021-43451: Phpgurukul Employee Record Management System

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.

Affected products

• Phpgurukul Employee Record Management System: version 1.2 only

Published 2021-12-01. Last modified 2026-06-17.