Unrated severityNVD Advisory· Published Jul 28, 2025· Updated Jul 28, 2025

CVE-2025-50484

Description

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.

Affected products

PHPGurukul/Small CRMdescription
Phpgurukul/Small CRMllm-fuzzy
Range: =3.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

phpgurukul.commitre
small.commitre
github.com/VasilVK/CVE/tree/main/CVE-2025-50484mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000