3 matches found
CVE-2025-63544
TechStore 1.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the /order_notes endpoint through the id parameter. The issue stems from insufficient input handling for the id parameter, enabling script injection. Impact is XSS in affected pages; no exploitation details are provided in...
CVE-2025-63544
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...
EUVD-2025-38298
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...