Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:staff_leave_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductStaff Leave Management System (30abd6f8-d95e-5876-8ff5-d4c3e6d58cb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0730 vulnerable 2026-06-08 07:47:13.092855 PHPGurukul Staff Leave Management System SVG File adminviews.py UPDATE_STAFF cross site scripting
LOW (2.4)
A flaw has been found in PHPGurukul Staff Leave Management System 1.0. The affected element is the function ADD_STAFF/UPDATE_STAFF of the file /staffleave/slms/slms/adminviews.py of the component SVG File Handler. Executing a manipulation of the argument profile_pic can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-01-08T22:02:09.530Z
Updated: 2026-02-23T08:24:15.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.