CVE-2025-51971: Puneethreddyhc Online Shopping System Advanced

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to inject arbitrary JavaScript code.

Affected products

• Puneethreddyhc Online Shopping System Advanced: version 1.0 only

Published 2025-08-28. Last modified 2026-09-26.