High severity7.6NVD Advisory· Published Sep 3, 2025· Updated Jun 17, 2026

CVE-2025-45805

Description

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

phpgurukul/Doctor Appointment Management Systemdescription
Phpgurukul/Doctor Appointment Management Systemllm-fuzzy
Range: <=1.0

Patches

Vulnerability mechanics

References

phpgurukul.com/doctor-appointment-management-system-using-php-and-mysqlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000