CVE-2025-52074: Phpgurukul Online Shopping Portal

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart.

Affected products

• Phpgurukul Online Shopping Portal: version 2.1 only

Published 2025-09-12. Last modified 2026-06-17.