Reflected Cross-Site Scripting Vulnerability in Daily Expense Manager from Daily Expense Manager Inc.

CVE-2025-40734

What is CVE-2025-40734?

A reflected Cross-Site Scripting vulnerability exists in Daily Expense Manager v1.0. This flaw allows an attacker to execute arbitrary JavaScript code by manipulating the POST request parameters, specifically through 'password' and 'confirm_password' during the registration process via /register.php. Successful exploitation could lead to unauthorized actions on behalf of users or access to sensitive user data.

References