CVE-2025-61456

🛡️ Divulgazione CVE: CVE-2025-61456 — XSS Riflesso in Progetto E-commerce Data di divulgazione: 14 ottobre 2025 ID CVE: CVE-2025-61456 Gravità: MEDIA CVSS 6.1 🧩 Riepilogo Esiste una vulnerabilità di Cross-Site Scripting XSS riflesso nel Progetto E-commerce v1.0, in particolare nell'endpoint...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

EUVD-2025-35051

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

EUVD-2025-35046

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61456

The CVE-2025-61456 entry documents a reflected XSS in Bhabishya-123 E-commerce 1.0, specifically in the index endpoint. Unescaped input from the /index parameter is echoed into the HTML response, enabling arbitrary JavaScript execution in a user’s browser via a crafted link or request. Affected p...

CVE-2025-61454

CVE-2025-61454 is an XSS vulnerability in the /search endpoint of Bhabishya-123 E-commerce 1.0. Unescaped input in the search parameter is directly reflected into the HTML response, allowing an attacker to execute arbitrary JavaScript in a user’s browser when a malicious link or crafted request i...

CVE-2025-61455

CVE-2025-61455 describes a SQL Injection in the E-commerce project (v1.0) signup.inc.php, caused by directly using unsanitized user input in SQL queries. The vulnerability enables unauthenticated authentication bypass and full backend access; the exposed parameter is typically the email field wit...

CVE-2025-61454

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...

CVE-2025-61454

A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpoint. Unsanitized input in the /search parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...