CVE-2024-48284: Phpgurukul User Registration & Login And User Management System

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary scripts via the searchkey parameter in a POST HTTP request.

Affected products

• Phpgurukul User Registration & Login And User Management System: version 3.2 only

Published 2024-11-14. Last modified 2026-06-17.