CVEs published March 24, 2025
156 CVEs were published on March 24, 2025: 12 critical, 45 high. 3 are now in CISA KEV.
- Published
- 156
- Critical
- 12
- High
- 45
- Medium
- 93
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 3
- Fix available
- 26
Most affected products
- PHPGurukul Bank Locker Management System
- 11
- kubernetes ingress-nginx · k8s.io/ingress-nginx
- 5
- Kentico Xperience
- 4
- Yonyou UFIDA ERP-NC
- 4
- cilium · github.com/cilium/cilium
- 2
- Digiwin ERP
- 2
- HCL Software HCL DevOps Deploy / HCL Launch
- 2
- Imagination Technologies Graphics DDK
- 2
- Simple SA SIMPLE.ERP
- 2
- Slider, Gallery, and Carousel by MetaSlider
- 2
Critical 12
- CVE-2025-1974ingress-nginx admission controller RCE escalationkubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2025-26512CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenterNetApp SnapCenter
- CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication BypassKentico Xperience
- CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication BypassKentico Xperience
- CVE-2023-25610A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, versFortinet FortiSwitchManager · Fortinet FortiAnalyzer +5
- CVE-2025-30615WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerabilityJacob Schwartz WP e-Commerce Style Email
- CVE-2025-30528WordPress Awesome Logos plugin <= 1.2 - CSRF to SQL Injection vulnerabilitywpshopee Awesome Logos
- CVE-2025-29100Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.
- CVE-2025-29135A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code through a stack ove
- CVE-2025-29310An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.
- CVE-2025-29312An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link t
- CVE-2025-29315An issue in the Shiro-based RBAC (Role-based Access Control) mechanism of OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodiumorg.opendaylight.sfc:sfc-parent
High 45
- CVE-2025-24514ingress-nginx controller - configuration injection via unsanitized auth-url annotationkubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2025-1098ingress-nginx controller - configuration injection via unsanitized mirror annotationskubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2025-1097ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotationkubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2025-2231PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityPDF-XChange Editor
- CVE-2025-2749Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCEKentico Xperience
- CVE-2025-30205kanidm-provision leaks provisioned admin credentials into the system logoddlama kanidm-provision
- CVE-2025-0255HCL DevOps Deploy / HCL Launch is susceptible to command injection vulnerabilityHCL Software HCL DevOps Deploy / HCL Launch
- CVE-2025-30621WordPress Translator plugin <= 0.3 - CSRF to Stored XSS vulnerabilitykornelly Translator
- CVE-2025-30620WordPress WP Odoo Form Integrator plugin <=1.1.0 - CSRF to Stored XSS vulnerabilitycoderscom WP Odoo Form Integrator
- CVE-2025-30612WordPress Replace Default Words plugin <= 1.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilitymandegarweb Replace Default Words
- CVE-2025-30608WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) VulnerabilityAnthony WordPress SQL Backup
- CVE-2025-30604WordPress JiangQie Official Website Mini Program plugin <= 1.8.2 - SQL Injection VulnerabilityJiangQie Official Website Mini Program
- CVE-2025-30603WordPress CopyLink plugin <= 1.1 - CSRF to Stored XSS vulnerabilityDEJAN CopyLink
- CVE-2025-30602WordPress Related Posts via Categories plugin <= 2.1.2 - CSRF to Stored XSS vulnerabilityalphasis Related Posts via Categories
- CVE-2025-30590WordPress Flickr set slideshows plugin <= 0.9 - SQL Injection VulnerabilityDourou Flickr set slideshows
- CVE-2025-30588WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerabilityryan_xantoo Map Contact
- CVE-2025-30587WordPress LH OGP Meta plugin <= 1.73 - CSRF to Stored XSS Vulnerabilityshawfactor LH OGP Meta
- CVE-2025-30586WordPress cTabs plugin <= 1.3 - CSRF to Stored XSS Vulnerabilitybbodine1 cTabs
- CVE-2025-30584WordPress AlphaOmega Captcha & Anti-Spam Filter plugin <= 3.3 - CSRF to Stored XSS Vulnerabilityalphaomegaplugins AlphaOmega Captcha & Anti-Spam Filter
- CVE-2025-30583WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS VulnerabilityProRankTracker Pro Rank Tracker
- CVE-2025-30578WordPress AdSense Privacy Policy plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerabilityhotvanrod AdSense Privacy Policy
- CVE-2025-30577WordPress Browser Address Bar Color plugin <= 3.3 - Cross Site Request Forgery (CSRF) to Stored XSS Vulnerabilitymendibass Browser Address Bar Color
- CVE-2025-30572WordPress Simple Rating plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilityIgor Yavych Simple Rating
- CVE-2025-30571WordPress STEdb Forms plugin <= 1.0.4 - SQL Injection VulnerabilitySTEdb Forms
- CVE-2025-30570WordPress دکمه، شبکه اجتماعی خرید plugin <= 2.0.6 - SQL Injection VulnerabilityAliRezaMohammadi دکمه، شبکه اجتماعی خرید
- CVE-2025-30569WordPress WP Featured Entries plugin <= - 1.0 SQL Injection VulnerabilityJahertor WP Featured Entries
- CVE-2025-30565WordPress banner-manager plugin <= 16.04.19 - CSRF to Stored XSS vulnerabilitykarrikas banner-manager
- CVE-2025-30564WordPress Custom Script Integration plugin <= - 2.1 Cross Site Request Forgery (CSRF) Vulnerabilitywpwox Custom Script Integration
- CVE-2025-30561WordPress CAS Maestro plugin <= 1.1.3 - CSRF to Stored XSS vulnerabilityHenrique Mouta CAS Maestro
- CVE-2025-30560WordPress jQuery Dropdown Menu plugin <= 3.0 - CSRF to Stored XSS vulnerabilitySana Ullah jQuery Dropdown Menu
- CVE-2025-30558WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerabilityEnzoCostantini55 ANAC XML Render
- CVE-2025-30555WordPress WordPres 同步微博 plugin <= 1.1.0 - CSRF to Stored XSS vulnerabilityiiiryan WordPres 同步微博
- CVE-2025-30552WordPress WordPress Admin Bar Improved plugin <= 3.3.5 - CSRF to Stored XSS vulnerabilityDonald Gilbert WordPress Admin Bar Improved
- CVE-2025-30550WordPress CallPhone'r plugin <= 1.1.1 - CSRF to Stored XSS vulnerabilityWPShop.ru CallPhone'r
- CVE-2025-30525WordPress WP Profitshare plugin <= 1.4.9 - SQL Injection vulnerabilityProfitShare.ro WP Profitshare
- CVE-2025-30523WordPress Super Simple Subscriptions plugin <= 1.1.0 - SQL Injection vulnerabilityMarcel-NL Super Simple Subscriptions
- CVE-2025-30522WordPress Contact Form 7 Material Design plugin <= 1.0.0 - CSRF to Stored XSS vulnerabilityDamian Orzol Contact Form 7 Material Design
- CVE-2024-8774Privilege Escalation in SIMPLE.ERPSimple SA SIMPLE.ERP
- CVE-2024-8773Protocol Downgrade in SIMPLE.ERPSimple SA SIMPLE.ERP
- CVE-2025-0835GPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange failsImagination Technologies Graphics DDK
- CVE-2025-0478GPU DDK - PMMETA_PROTECT PMR can be exported as dma-buf file / GEM objectImagination Technologies Graphics DDK
- CVE-2025-29311Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.
- CVE-2025-29313Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allows attorg.opendaylight.sfc:odl-sfc-openflow-renderer · org.openda…
- CVE-2025-29314Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allow attackers to org.opendaylight.sfc:odl-sfc-ovs · org.opendaylight.sfc:odl…
- CVE-2025-30112On 70mai Dash Cam 1S devices, by connecting directly to the dashcam's network and accessing the API on port 80 and RTSP on port 554, an atta
Medium, low and unrated 99
- CVE-2025-2717D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injectionD-Link DIR-823X
- CVE-2025-24513ingress-nginx controller - auth secret file path traversal vulnerabilitykubernetes ingress-nginx · k8s.io/ingress-nginx
- CVE-2025-2716China Mobile P22g-CIac Samba Path path traversalChina Mobile P22g-CIac
- CVE-2025-2715timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scriptingtimschofield webERP
- CVE-2025-2714JoomlaUX JUX Real Estate addagent cross site scriptingJoomlaUX JUX Real Estate
- CVE-2025-2712Yonyou UFIDA ERP-NC top.jsp cross site scriptingYonyou UFIDA ERP-NC
- CVE-2025-2711Yonyou UFIDA ERP-NC systop.jsp cross site scriptingYonyou UFIDA ERP-NC
- CVE-2025-2710Yonyou UFIDA ERP-NC menu.jsp cross site scriptingYonyou UFIDA ERP-NC
- CVE-2025-2709Yonyou UFIDA ERP-NC login.jsp cross site scriptingYonyou UFIDA ERP-NC
- CVE-2025-2708zhijiantianya ruoyi-vue-pro Backend File Upload upload path traversalzhijiantianya ruoyi-vue-pro
- CVE-2025-2707zhijiantianya ruoyi-vue-pro Front-End Store upload path traversalzhijiantianya ruoyi-vue-pro
- CVE-2025-30163Node based network policies may incorrectly allow workload trafficcilium · github.com/cilium/cilium
- CVE-2025-30162East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancerscilium · github.com/cilium/cilium
- CVE-2025-2706Digiwin ERP UploadAjaxAPI.ashx unrestricted uploadDigiwin ERP
- CVE-2025-2748Kentico Xperience stored cross-site scripting in multiple-file upload functionalityKentico Xperience
- CVE-2025-22223Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods.Spring Security · org.springframework.security:spring-secur…
- CVE-2025-30208Vite bypasses server.fs.deny when using `?raw??`vitejs vite · vite
- CVE-2025-29778Kyverno ignores subjectRegExp and IssuerRegExpkyverno · github.com/kyverno/kyverno
- CVE-2024-9103Persistent XSS in blocked messagesForcepoint Email Security
- CVE-2025-2705Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted uploadDigiwin ERP
- CVE-2025-23204GraphQl securityAfterResolver not calledapi-platform core · api-platform/core
- CVE-2021-26091A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Based Encryption serviceFortinet FortiMail
- CVE-2025-0256HCL DevOps Deploy / HCL Launch is susceptible to a sensitive information disclosureHCL Software HCL DevOps Deploy / HCL Launch
- CVE-2021-26105A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and belowFortinet FortiSandbox
- CVE-2025-1558Denial of Service Via Malicious GIFMattermost
- CVE-2025-30623WordPress wA11y – The Web Accessibility Toolbox plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerabilityRachel Cherry wA11y – The Web Accessibility Toolbox
- CVE-2025-30619WordPress SpeakPipe plugin <= 0.2 - Cross Site Request Forgery (CSRF) VulnerabilitySpeakPipe
- CVE-2025-30617WordPress Rewrite plugin <= 0.2.1 - Cross Site Request Forgery (CSRF) Vulnerabilitytakien Rewrite
- CVE-2025-30610WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerabilitycatchsquare WP Social Widget
- CVE-2025-30609WordPress AppExperts plugin <= 1.4.3 - Sensitive Data Exposure VulnerabilitySaad Iqbal AppExperts
- CVE-2025-30606WordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityLogan Carlile Easy Page Transition
- CVE-2025-30605WordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerabilityldwin79 sourceplay-navermap
- CVE-2025-30601WordPress Flipdish Ordering System plugin <= 1.5.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilityFlipdish Ordering System
- CVE-2025-30600WordPress WP Hotjar plugin <= 0.0.3 - Cross Site Scripting (XSS) vulnerabilitythiagogsrwp WP Hotjar
- CVE-2025-30599WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerabilitywp-maverick WP Parallax Content Slider
- CVE-2025-30598WordPress OSS Upload plugin <= 4.8.9 Cross Site Request Forgery (CSRF) VulnerabilityLink OSS Upload
- CVE-2025-30597WordPress IG Shortcodes plugin <= 3.1 Cross Site Scripting (XSS) Vulnerabilityiografica IG Shortcodes
- CVE-2025-30595WordPress include-file plugin <= 1 Cross Site Scripting (XSS) Vulnerabilitytstafford include-file
- CVE-2025-30593WordPress Include URL plugin <= 0.3.5 Cross Site Scripting (XSS) Vulnerabilitysamsk Include URL
- CVE-2025-30592WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control VulnerabilityWesternDeal Advanced Dewplayer
- CVE-2025-30591WordPress Music Press Pro plugin <= 1.4.6 Broken Access Control Vulnerabilitytuyennv Music Press Pro
- CVE-2025-30585WordPress Generate Post Thumbnails plugin <= 0.8 - Cross Site Request Forgery (CSRF) Vulnerabilitymarynixie Generate Post Thumbnails
- CVE-2025-30581WordPress Top Bar plugin <= 3.3 - Broken Access Control VulnerabilityPluginOps Top Bar
- CVE-2025-30576WordPress Hacklog Remote Image Autosave plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) VulnerabilityHuangYe WuDeng Hacklog Remote Image Autosave
- CVE-2025-30575WordPress Login Redirect plugin <= - 1.0.5 Cross Site Scripting (XSS) VulnerabilityArefly Login Redirect
- CVE-2025-30574WordPress Mobile Navigation plugin <= - 1.5 Cross Site Scripting (XSS) VulnerabilityJenst Mobile Navigation
- CVE-2025-30573WordPress My Default Post Content plugin <= - 0.7.3 Cross Site Scripting (XSS) Vulnerabilitymrdenny My Default Post Content
- CVE-2025-30568WordPress Super Static Cache plugin <= 3.3.5 - Cross Site Request Forgery (CSRF) Vulnerabilityhitoy Super Static Cache
- CVE-2025-30566WordPress Clink plugin <= 1.2.2 - Cross Site Scripting (XSS) VulnerabilityAryan Themes Clink
- CVE-2025-30557WordPress Easy 301 Redirects plugin <= 1.33 - Cross Site Request Forgery (CSRF) vulnerabilityodihost Easy 301 Redirects
- CVE-2025-30556WordPress Fix Rss Feeds plugin <= 3.1 - Cross Site Request Forgery (CSRF) vulnerabilityflyaga Fix Rss Feeds
- CVE-2025-30553WordPress GMO Font Agent plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityZ.com byGMO GMO Font Agent
- CVE-2025-30551WordPress Pretty file links plugin <= 0.9 - Cross Site Scripting (XSS) vulnerabilitysmartredfox Pretty file links
- CVE-2025-30549WordPress Yummly Rich Recipes plugin <= 4.2 - Cross Site Request Forgery (CSRF) vulnerabilityYummly Rich Recipes
- CVE-2025-30546WordPress Cackle plugin <= 4.33 - Cross Site Request Forgery (CSRF) vulnerabilityboroV Cackle
- CVE-2025-30545WordPress issuuPress plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilitypixeline issuuPress
- CVE-2025-30543WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerabilityswayam.tejwani Menu Duplicator
- CVE-2025-30542WordPress WP SoundCloud Ultimate plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerabilitywpsolutions SoundCloud Ultimate
- CVE-2025-30541WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerabilityOTWthemes Info Boxes Shortcode and Widget
- CVE-2025-30540WordPress AvaiBook plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityAvaiBook
- CVE-2025-30539WordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityBenedikt Mo BMo Expo
- CVE-2025-30538WordPress Simple Optimizer plugin <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerabilityChrisHurst Simple Optimizer
- CVE-2025-30537WordPress Upload Quota per User plugin <= 1.3 - Cross Site Scripting (XSS) VulnerabilityCristian Sarov Upload Quota per User
- CVE-2025-30536WordPress Beautiful Link Preview plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityzeitwesentech Beautiful Link Preview
- CVE-2025-30535WordPress External image replace plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilitymuro External image replace
- CVE-2025-30534WordPress Image Captcha plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerabilitycaptcha.soft Image Captcha
- CVE-2025-30533WordPress Message ticker plugin <= 9.3 - Cross Site Scripting (XSS) Vulnerabilitygopiplus Message ticker
- CVE-2025-30532WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerabilityMorganF Weather Layer
- CVE-2025-30531WordPress WP Ride Booking plugin <= 2.4 - Cross Site Request Forgery (CSRF) VulnerabilityGBS Developer WP Ride Booking
- CVE-2025-30530WordPress AI Preloader plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityAtikul AI Preloader
- CVE-2025-30529WordPress Auto Load Next Post plugin <= 1.5.14 - Cross Site Request Forgery (CSRF) vulnerabilitySébastien Dumont Auto Load Next Post
- CVE-2025-30527WordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilitycodetoolbox My Bootstrap Menu
- CVE-2025-30526WordPress Typekit plugin <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerabilitylucksy Typekit plugin for WordPress
- CVE-2025-30521WordPress GP Back To Top plugin <= 3.0 - Cross Site Request Forgery (CSRF) vulnerabilitygiangmd93 GP Back To Top
- CVE-2025-2702Softwin WMX3 ImageAdd.ashx ImageAdd unrestricted uploadSoftwin WMX3
- CVE-2025-2701AMTT Hotel Broadband Operation System port_setup.php popen os command injectionAMTT Hotel Broadband Operation System
- CVE-2025-2700michelson Dante Editor Insert Link cross site scriptingmichelson Dante Editor
- CVE-2025-2699GetmeUK ContentTools Image cross site scriptingGetmeUK ContentTools · ContentTools
- CVE-2025-2690yiisoft Yii2 MockClass.php generate deserializationyiisoft Yii2
- CVE-2025-2689yiisoft Yii2 SortableIterator.php getIterator deserializationyiisoft Yii2 · yiisoft/yii2-dev
- CVE-2025-2688TOTOLINK A3000RU Syslog Configuration File ExportSyslog.sh access controlTOTOLINK A3000RU
- CVE-2025-2687PHPGurukul eLearning System Image index.php unrestricted uploadPHPGurukul eLearning System
- CVE-2025-1203Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSSSlider, Gallery, and Carousel by MetaSlider
- CVE-2025-1062Slider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSSSlider, Gallery, and Carousel by MetaSlider
- CVE-2024-13124Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSSPhoto Gallery by 10Web
- CVE-2024-10558Form Maker by 10Web < 1.15.30 - Admin+ Stored XSSForm Maker by 10Web
- CVE-2025-2686mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 Backend admin doFilter access controlmingyuefusu 明月复苏 tushuguanlixitong 图书管理系统
- CVE-2025-2684PHPGurukul Bank Locker Management System search-report-details.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2683PHPGurukul Bank Locker Management System profile.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2682PHPGurukul Bank Locker Management System edit-subadmin.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2681PHPGurukul Bank Locker Management System edit-locker.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2680PHPGurukul Bank Locker Management System edit-assign-locker.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2679PHPGurukul Bank Locker Management System contact-us.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2678PHPGurukul Bank Locker Management System changeimage1.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2677PHPGurukul Bank Locker Management System changeidproof.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2676PHPGurukul Bank Locker Management System add-subadmin.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2675PHPGurukul Bank Locker Management System add-lockertype.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2025-2674PHPGurukul Bank Locker Management System aboutus.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2024-55279Uguu through 1.8.9 allows Cross Site Scripting (XSS) via JavaScript in XML files.