Reflected XSS Vulnerability in PuneethReddyHC Online Shopping System
CVE-2025-51971

5.4MEDIUM

Key Information:

Vendor: PuneethReddyHC
Status: Online Shopping System Advanced
Vendor: CVE Published:; 28 August 2025

🔔 Create PuneethReddyHC Vulnerability Alert

What is CVE-2025-51971?

A vulnerability exists in the PuneethReddyHC Online Shopping System Advanced 1.0, specifically in the register.php file. This flaw allows unsanitized user input from the 'f_name' parameter to be reflected in the server's response. Without proper HTML encoding or output escaping, this vulnerability permits remote attackers to execute arbitrary JavaScript code within the context of the user's browser, leading to potential data theft or unauthorized actions.

References

https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 28, 2025
Vulnerability Reserved
Jun 16, 2025

JSON