CVE-2025-45953: Phpgurukul Hostel Management System

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely

Affected products

• Phpgurukul Hostel Management System: version 2.1 only

Published 2025-04-28. Last modified 2026-07-05.