CVE-2025-8221

The CVE-2025-8221 entry concerns jerryshensjf JPACookieShop 蛋糕商城JPA版, affecting the goodsSearch function in GoodsCustController.java. The issue is a cross-site scripting vulnerability caused by improper handling/manipulation of the keyword argument, enabling remote exploitation. Public exploit de...

CVE-2025-8221 jerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting

A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this vulnerability is the function goodsSearch of the file GoodsCustController.java. The manipulation of the argument keyword leads to cross site...

PT-2025-30993 · Unknown · Jpacookieshop

Name of the Vulnerable Software and Affected Versions: jerryshensjf JPACookieShop 蛋糕商城JPA版 versions up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999 Description: A cross-site scripting issue exists due to the manipulation of the keyword argument within the goodsSearch function of the...