CVE-2025-12616

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing a manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.

CVSS 4.0

2.9CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-25)

CWEs

CWE-200, CWE-215

Published

2025-11-03

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• phpgurukul:news_portal

References

• https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Information%20Disclosure%20via%20Debug%20Mode.md
• https://phpgurukul.com/
• https://vuldb.com/?ctiid.330910
• https://vuldb.com/?id.330910
• https://vuldb.com/?submit.678649

Check your stackJSON