A vulnerability categorized as critical has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection.
This vulnerability was named CVE-2025-10098. The attack may be performed from remote. In addition, an exploit is available.