CVE-2025-30985: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

CVE-2025-26564

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through = 1.5.4...

PT-2025-12920

Name of the Vulnerable Software and Affected Versions kagla GNUCommerce versions 1.5.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.5.4 an...