A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to inject arbitrary JavaScript code.
References
| Link | Resource |
|---|---|
| https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51971%20%E2%80%93%20Reflected%20Cross-Site%20Scripting%20%28XSS%29%20in%20Online%20Shopping%20System | Exploit Third Party Advisory |
Configurations
History
09 Sep 2025, 18:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:puneethreddyhc:online_shopping_system_advanced:1.0:*:*:*:*:*:*:* | |
| First Time |
Puneethreddyhc online Shopping System Advanced
Puneethreddyhc |
|
| References | () https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51971%20%E2%80%93%20Reflected%20Cross-Site%20Scripting%20%28XSS%29%20in%20Online%20Shopping%20System - Exploit, Third Party Advisory |
28 Aug 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
28 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-28 14:15
Updated : 2025-09-09 18:42
NVD link : CVE-2025-51971
Mitre link : CVE-2025-51971
CVE.ORG link : CVE-2025-51971
JSON object : View
Products Affected
puneethreddyhc
- online_shopping_system_advanced
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')