CVE-2025-57576

MEDIUM

PHPGurukul Online Shopping Portal 2.1 - Cross-Site Scripting in /admin/updateorder.php

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-57576. PoCs published by p0et08.

AI-analyzed exploit summary This repository provides a detailed writeup for CVE-2025-57576, a stored XSS vulnerability in PHPGurukul Online Shopping Portal 2.1. It includes steps to reproduce the vulnerability but lacks actual exploit code.

Description

PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.

Exploits (1)

nomisec WRITEUP
by p0et08 · poc
https://github.com/p0et08/DWrwq

This repository provides a detailed writeup for CVE-2025-57576, a stored XSS vulnerability in PHPGurukul Online Shopping Portal 2.1. It includes steps to reproduce the vulnerability but lacks actual exploit code.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: PHPGurukul Online Shopping Portal 2.1
Auth required
Prerequisites: Access to admin panel · Default credentials (admin/Test@123)
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 5.4
EPSS 0.0019
EPSS Percentile 8.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
phpgurukul/online_shopping_portal 2.1
Published Sep 04, 2025
Tracked Since Feb 18, 2026