How to: CVE-2025-45805 (2025-09-03)
```
In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript code into their profile name. This payload is subsequently rendered without proper sanitization, when a user visits the website and selects the doctor to book an appointment.
```
- [mhsinj/CVE-2025-45805](https://github.com/mhsinj/CVE-2025-45805)
- [mohammed-alsaqqaf/CVE-2025-45805](https://github.com/mohammed-alsaqqaf/CVE-2025-45805)