<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: time table generator system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-7941: A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-7941.html</link><guid>https://patchthecve.com/cve/CVE-2025-7941.html</guid><pubDate>Wed, 17 Jun 2026 10:06:00 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The e</description></item><item><title>CVE-2025-45007: A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Time</title><link>https://patchthecve.com/cve/CVE-2025-45007.html</link><guid>https://patchthecve.com/cve/CVE-2025-45007.html</guid><pubDate>Wed, 17 Jun 2026 09:25:20 +0000</pubDate><description>MEDIUM 4.8: A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the adminname POST request parameter.</description></item><item><title>CVE-2025-3168: A vulnerability was found in PHPGurukul Time Table Generator System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-3168.html</link><guid>https://patchthecve.com/cve/CVE-2025-3168.html</guid><pubDate>Wed, 17 Jun 2026 09:19:20 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely</description></item></channel></rss>