CVE-2026-90845: Phpgurukul Daily Expense Tracker System

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

Affected products

• Phpgurukul Daily Expense Tracker System: version 1.1 only

Published 2026-09-15. Last modified 2026-09-15.