Online Shopping Portal /admin/updateorder.php Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /admin/updateorder.php, which can be exploited by an attacker to execute arbitrary web script o...

CVE-2025-57576

The PHPGurukul Online Shopping Portal version 2.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability within the /admin/updateorder.php endpoint. The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to ex...