CVE-2025-45002

The e-commerce platform Vigybag (versions 1.0 and before ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the upload profile picture function located under the "my profile" section, where improper neutralization of input during web page generation allows for the execution of mal...