CVE-2025-3560

The CVE-2025-3560 entry concerns ghostxbh uzy-ssm-mall 1.0.0. The issue is a cross-site scripting (XSS) vulnerability in the /product endpoint caused by improper handling of the product_name argument. The problem is actionable remotely, and public disclosure of the exploit is noted. Connected sou...