Cross-Site Scripting Vulnerability in PuneethReddyHC Event Management System
CVE-2025-56243

6.1MEDIUM

Key Information:

Vendor: PuneethReddyHC
Status: Event Management System
Vendor: CVE Published:; 7 October 2025

🔔 Create PuneethReddyHC Vulnerability Alert

What is CVE-2025-56243?

A Cross-Site Scripting (XSS) vulnerability exists in the register.php page of the PuneethReddyHC Event Management System version 1.0. The vulnerability arises due to improper handling of the event_id GET parameter, allowing attackers to craft malicious URLs that can execute arbitrary JavaScript code in the browser of the victim. This exploitation could lead to unauthorized actions being performed on behalf of users or the theft of sensitive information.

References

https://gist.github.com/hafizgemilang/a75cbf48883881e0b27...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 7, 2025
Vulnerability Reserved
Aug 16, 2025

JSON