CVE-2025-4874 | PHPGurukul News Portal Project 4.1 /admin/contactus.php pagetitle sql injection

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection.

This vulnerability is handled as CVE-2025-4874. The attack may be launched remotely. Furthermore, there is an exploit available.