https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-6288.htmlhttps://patchthecve.com/cve/CVE-2025-6288.htmlWed, 17 Jun 2026 10:01:32 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross sithttps://patchthecve.com/cve/CVE-2025-3146.htmlhttps://patchthecve.com/cve/CVE-2025-3146.htmlWed, 17 Jun 2026 09:19:16 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2024-44798.htmlhttps://patchthecve.com/cve/CVE-2024-44798.htmlWed, 17 Jun 2026 07:53:07 +0000MEDIUM 4.8: phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting (XSS) in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters.