CVE-2024-46335

Medium · 4.6

CVSS

4.6

EPSS

0.2%

Published

Nov 17, 2025

CISA due date

—

The record

PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.

Affected packages

Ecosystem	Package	Introduced	Fixed