CVE-2025-12334

CVE-2025-12334 concerns code-projects E-Commerce Website 1.0. The vulnerability is in the /pages/product_add.php file, where manipulating prod_name, prod_desc, or prod_cost enables cross-site scripting. It can be triggered remotely, and multiple sources indicate the exploit has been made public. ...