Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-40734

Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.

Published

2025-06-30T09:15:25.947

Last Modified

2025-07-07T18:17:48.017

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application code-projects daily_expense_manager 1.0 Yes
References