A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute arbitrary JavaScript code in the victim's browser.
References
| Link | Resource |
|---|---|
| https://github.com/Userr404/CVE-2025-56605 |
Configurations
No configuration.
History
26 Feb 2026, 18:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
26 Feb 2026, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-26 16:23
Updated : 2026-02-27 14:06
NVD link : CVE-2025-56605
Mitre link : CVE-2025-56605
CVE.ORG link : CVE-2025-56605
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')