CVE-2025-40626

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

CVE-2025-40626

creationtimestamp| type| source ---|---|--- 2025-05-12 14:42:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loy7dunjgi2t 2025-05-12 16:56:56+00:00| seen| https://t.me/cvedetector/25080...

CVE-2025-40626

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

CVE-2025-40626

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

CVE-2025-40626

CVE-2025-40626 corresponds to a reflected XSS in AbanteCart v1.4.0. The issue affects the /about_us endpoint where a malicious XSS payload can be reflected to the victim, enabling JavaScript execution that could steal session cookies or perform actions on behalf of the user, as described in multi...