Description

A stored cross-site scripting (XSS) vulnerability exists in Phpgurukul Cyber Cafe Management System v1.0 within the user management module. The application does not properly sanitize or encode user-supplied input submitted via the uadd parameter in the add-users.php endpoint. An authenticated attacker can inject arbitrary JavaScript code that is persistently stored in the database. The malicious payload is triggered when a privileged user clicks the View button on the view-allusers.php page.

INFO

Published Date :

2026-01-15T00:00:00.000Z

Last Modified :

2026-01-15T21:06:05.340Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-70891 vulnerability.

Vendors Products
Phpgurukul
  • Cyber Cafe Management System
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-70891.

URL Resource
https://github.com/efekaanakkar/Cyber-Cafe-Management-System-CVEs/tree/main/CVE-2025-70891 cve-icon cve-icon
https://phpgurukul.com/cyber-cafe-management-system-using-php-mysql cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact