Administrator script execution via unencoded request fields

Stored cross-site scripting in PHPGurukul Emergency Ambulance Hiring Portal 1.0 allows remote attackers to run scripts in an administrator's browser. The Hire an Ambulance form stores Patient Name, Relative Name, Relative Phone Number, City, State, and Message values and later embeds them directly into the administrator request view without HTML sanitization or output encoding. No authentication is required to submit a payload, but an administrator must open the resulting request before the script executes in that browser.