Lucene search
+L

35 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•5 views

CVE-2025-63543: Improper Neutralization of Input During Web Page Generation

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•19 views

PT-2025-45503

Name of the Vulnerable Software and Affected Versions TechStore version 1.0 Description TechStore version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /search results API endpoint through the q parameter. An attacker could potentially inject malicious scripts into the w...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/11/07 12:00 a.m.•17 views

EUVD-2025-38306

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

5.7AI score0.00228EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/07 12:00 a.m.•7 views

CVE-2025-63544

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...

5.8AI score0.00228EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•5 views

CVE-2025-63544: Improper Neutralization of Input During Web Page Generation

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/07 12:00 a.m.•30 views

CVE-2025-63544

TechStore version 1.0 is vulnerable to Cross Site Scripting (XSS) due to the incorrect manipulation of the id parameter in the /order_notes API endpoint. This vulnerability allows an attacker to execute malicious scripts in a victim's browser. As a mitigation, it is recommended to restrict or san...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•24 views

PT-2025-45504

Name of the Vulnerable Software and Affected Versions TechStore version 1.0 Description TechStore version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /order notes API endpoint through the id parameter. Recommendations As a mitigation, restrict or sanitize input to the ...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/11/07 12:00 a.m.•9 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

5.8AI score0.00228EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/07 12:00 a.m.•18 views

EUVD-2025-38298

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...

5.7AI score0.00228EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•16 views

TechStore Pro security vulnerabilities

TechStore Pro is an e-commerce platform for nooncarlett individual developers. A security vulnerability exists in TechStore Pro version 1.0, which stems from incorrect manipulation of the parameter id in the file /ordernotes and could lead to a cross-site scripting attack...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/07 12:00 a.m.•25 views

CVE-2025-63544

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...

0.00228EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•17 views

TechStore Pro security vulnerabilities

TechStore Pro is an e-commerce platform for nooncarlett individual developers. A security vulnerability exists in TechStore Pro version 1.0, which stems from an unvalidated parameter q in the /searchresults endpoint that could lead to a cross-site scripting attack...

6.1CVSS6AI score0.00228EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/07 12:00 a.m.•33 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated q parameter in the /search_results endpoint. An attacker could potentially inject malicious scripts into web pages viewed by other users. Remediation involves applying input validation and output encoding to the q par...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/11/07 12:00 a.m.•25 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

0.00228EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2017/08/23 5:20 p.m.•10 views

techstore.doit.wisc.edu XSS vulnerability

Vulnerable URL: https://techstore.doit.wisc.edu/free.asp?login=P=category=SOFT" Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...

6.3AI score
SaveExploits0
Rows per page
Query Builder