Critical Vulnerability Information Vulnerability Overview CVE ID: CVE-2025-44183 Affected Version: PHPGurukul Vehicle Record Management System v1.0 Vulnerable File: /admin/profile.php Vulnerable Parameters: name, email, and mobile Vulnerability Details Type: Stored Cross-Site Scripting (XSS) Cause: The application fails to properly validate and sanitize user input data, allowing malicious script injection. Proof of Concept (PoC) Steps: - Navigate to the admin profile section. - Click the update button. - Intercept the POST request to /admin/profile.php using Burp Suite. - Inject the payload: into the vulnerable parameters. Example Request: Result: XSS triggered in the admin profile section.