CVE-2025-10616

The CVE-2025-10616 entry concerns itsourcecode E-Commerce Website 1.0. The vulnerable component is the file /admin/users.php where an unspecified manipulation yields an unrestricted upload. The vulnerability can be exploited remotely and the exploit has been released publicly. Other details in co...

CVE-2025-10615

The CVE-2025-10615 entry concerns itsourcecode E-Commerce Website 1.0. Affected component: the /admin/products.php file, where an unrestricted file upload vulnerability exists due to the flaw in that function. The issue is exploitable remotely and has publicly available exploits. Various connecte...

CVE-2025-8411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers. This issue affects E-Commerce Web Design Product: before 11.08.2025...

CVE-2025-8411 XSS in Dokuzsoft Technology's E-Commerce Web Design Product

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers. This issue affects E-Commerce Web Design Product: before 11.08.2025...

CVE-2025-8411 XSS in Dokuzsoft Technology's E-Commerce Web Design Product

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers. This issue affects E-Commerce Web Design Product: before 11.08.2025...

CVE-2025-8411

CVE-2025-8411 describes an XSS vulnerability in Dokuzsoft Technology’s E-Commerce Web Design Product due to improper neutralization of input during web page generation, enabling XSS through HTTP headers. Affected versions are before 11.08.2025. The impact is web-based cross-site scripting with lo...

PT-2025-38141

Name of the Vulnerable Software and Affected Versions Dokuzsoft Technology E-Commerce Web Design Product versions prior to 11.08.2025 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Cross-site Scripting XSS through...

PT-2025-38263

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A vulnerability exists in itsourcecode E-Commerce Website 1.0, impacting an unknown function within the /admin/products.php file. This allows for unrestricted file upload, and the attac...

Dokuzsoft E-Commerce Web Design Product 跨站脚本漏洞

Dokuzsoft E-Commerce Web Design Product is an e-commerce platform website design software from Dokuzsoft Turkey. A cross-site scripting vulnerability exists in Dokuzsoft E-Commerce Web Design Product versions prior to 11.08.2025, which stems from improper input neutralization and could lead to...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the JSON Web Services published to OSGi. An attacker can gain unauthorized access to restricted service operations by invoking classes directly, which causes Service Access Policies to be executed. Remediatio...

CVE-2025-58984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.20...

CVE-2025-54236

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...

Adobe Commerce Security Bypass Vulnerability (CNVD-2025-21417)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce that can be exploited by an attacker to bypass security restrictions...

Vulnerability fixed in Adobe Commerce and Magento

Adobe has fixed a vulnerability in Adobe Commerce and Magento. The vulnerability is in the way input is validated in Adobe Commerce and Magento. This vulnerability allows attackers to perform session takeover attacks without any user interaction, which can compromise the confidentiality and...

CVE-2025-9367

CVE-2025-9367 affects the Welcart e-Commerce plugin for WordPress (versions up to 2.11.20). It enables stored Cross-Site Scripting via settings due to insufficient input sanitization and output escaping. Authenticated attackers with editor-level permissions or higher can inject scripts that execu...

CVE-2025-9367 Welcart e-Commerce <= 2.11.20 - Authenticated (Editor+) Stored Cross-Site Scripting

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 2.11.20 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and...

Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts

Adobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE-2025-54236 aka SessionReaper, carries a CVSS score of 9.1 out of a maximum ...

WordPress plugin Welcart e-Commerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-58984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.20...

WordPress Welcart e-Commerce Plugin <= 2.11.20 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by 63n0 in WordPress Plugin Welcart e-Commerce versions = 2.11.20...