35 matches found
CVE-2025-63543: Improper Neutralization of Input During Web Page Generation
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...
PT-2025-45503
Name of the Vulnerable Software and Affected Versions TechStore version 1.0 Description TechStore version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /search results API endpoint through the q parameter. An attacker could potentially inject malicious scripts into the w...
EUVD-2025-38306
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...
CVE-2025-63544
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...
CVE-2025-63544: Improper Neutralization of Input During Web Page Generation
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...
CVE-2025-63544
TechStore version 1.0 is vulnerable to Cross Site Scripting (XSS) due to the incorrect manipulation of the id parameter in the /order_notes API endpoint. This vulnerability allows an attacker to execute malicious scripts in a victim's browser. As a mitigation, it is recommended to restrict or san...
PT-2025-45504
Name of the Vulnerable Software and Affected Versions TechStore version 1.0 Description TechStore version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /order notes API endpoint through the id parameter. Recommendations As a mitigation, restrict or sanitize input to the ...
CVE-2025-63543
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...
EUVD-2025-38298
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...
TechStore Pro security vulnerabilities
TechStore Pro is an e-commerce platform for nooncarlett individual developers. A security vulnerability exists in TechStore Pro version 1.0, which stems from incorrect manipulation of the parameter id in the file /ordernotes and could lead to a cross-site scripting attack...
CVE-2025-63544
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in /ordernotes via the id parameter...
TechStore Pro security vulnerabilities
TechStore Pro is an e-commerce platform for nooncarlett individual developers. A security vulnerability exists in TechStore Pro version 1.0, which stems from an unvalidated parameter q in the /searchresults endpoint that could lead to a cross-site scripting attack...
CVE-2025-63543
TechStore 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated q parameter in the /search_results endpoint. An attacker could potentially inject malicious scripts into web pages viewed by other users. Remediation involves applying input validation and output encoding to the q par...
CVE-2025-63543
TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...
techstore.doit.wisc.edu XSS vulnerability
Vulnerable URL: https://techstore.doit.wisc.edu/free.asp?login=P=category=SOFT" Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 21:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VI...