CVE-2025-40674

🗓️ 17 Jun 2025 08:50:17Reported by INCIBEType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 28 Views🌐 WEB

Reflected XSS in osCommerce v4 allows JavaScript execution via malicious URL, risking user data theft.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-40674	17 Jun 202509:41	–	circl
CNNVD	osCommerce 跨站脚本漏洞	17 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-40674 Reflected Cross-Site Scripting (XSS) in osCommerce	17 Jun 202508:50	–	cvelist
EUVD	EUVD-2025-18487	3 Oct 202520:07	–	euvd
NVD	CVE-2025-40674	17 Jun 202509:15	–	nvd
Positive Technologies	PT-2025-23799 · Oscommerce · Oscommerce	4 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-40674	19 Jun 202509:00	–	redhatcve
Vulnrichment	CVE-2025-40674 Reflected Cross-Site Scripting (XSS) in osCommerce	17 Jun 202508:50	–	vulnrichment

Vulners

Node

oscommerce oscommerceRange≤v4

[
  {
    "defaultStatus": "unaffected",
    "product": "osCommerce",
    "vendor": "osCommerce",
    "versions": [
      {
        "status": "affected",
        "version": "v4"
      }
    ]
  }
]