CVE-2023-31935: Phpgurukul Rail Pass Management System

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php.

Affected products

• Phpgurukul Rail Pass Management System: version 1.0 only

Published 2023-07-28. Last modified 2026-06-17.