Loadedcommerce Loaded Commerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Loadedcommerce Loaded Commerce: 1 record(s), with affected versions and fixes.

CVE-2025-66572 Medium · 6.9 CWE-78 Dec 4, 2025

Loaded Commerce 6.6 Client-Side Template Injection (CSTI)

Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.