CVE-2025-65354: Puneethreddyhc Event Management

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper input handling in /Grocery/search_products_itname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitem_name POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend compromise.

Affected products

• Puneethreddyhc Event Management: version 1.0 only

Published 2025-12-23. Last modified 2026-06-17.