CVE-2025-63879

The E-commerce Project (v1.0 and earlier) contains a reflected cross-site scripted (XSS) vulnerability within the /ecommerce/products.php component. An attacker can execute arbitrary JavaScript in a user's browser by injecting a crafted payload into the id parameter . This vulnerability is classi...