Online Shopping Portal /admin/updateorder.php Cross-Site Scripting Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in /admin/updateorder.php, which can be exploited by an attacker to execute arbitrary web script o...

CVE-2025-57576

PHPGurukul Online Shopping Portal version 2.1 is vulnerable to Cross-Site Scripting (XSS) in the /admin/updateorder.php endpoint. The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute arbitrary web scrip...