Nooncarlett Techstore vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Nooncarlett Techstore: 3 record(s), with affected versions and fixes.cpe:2.3:a:nooncarlett:techstore
CVE-2025-66845
Medium · 6.1
CWE-79 Dec 23, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.
CVE-2025-63544
Medium · 6.1
CWE-79 Nov 7, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
CVE-2025-63543
Medium · 6.1
CWE-79 Nov 7, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.