VulnerabilityAnalyzed
CVE-2026-1424
A vulnerability was identified in PHPGurukul News Portal 1.0.
LOW 2.0EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was identified in PHPGurukul News Portal 1.0. This affects an unknown part of the component Profile Pic Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
- CVSS 4.0
- 2.0 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284, CWE-434
- Affected
- phpgurukul/news portal
- Source
- cna@vuldb.com
References
- https://github.com/rsecroot/News-Portal/blob/main/Cross%20Site%20Scripting.mdExploit, Mitigation, Third Party Advisory
- https://phpgurukul.com/Product
- https://vuldb.com/?ctiid.342840Permissions Required, VDB Entry
- https://vuldb.com/?id.342840Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.736637Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.