CVE-2025-52074

PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS due to lack of input sanitization in the quantity parameter when adding a product to the cart...

CVE-2025-52074

The PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitize inputs provided to the quantity parameter when a user adds a product to the shopping cart. An attacker could exploit this flaw to perform a cross-site scripting...

PT-2024-10179 · Phpoffice · Phpspreadsheet

Name of the Vulnerable Software and Affected Versions: PhpSpreadsheet versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.29.7 Description: The issue is related to the lack of sanitization in the /vendor/phpoffice/phpspreadsheet/samples/Engineering/Convert-Online.php file, which can lead to a cross-site...