CVE-2025-29156

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet...

CVE-2025-29156

A Cross-Site Scripting (XSS) vulnerability exists in petstore version 1.0.7 due to the /api/v3/pet interface failing to validate specially crafted scripts. A remote attacker can exploit this by submitting a malicious script to the endpoint, potentially leading to the execution of arbitrary code. ...