Loadedcommerce vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Loadedcommerce products: 1 record(s), with severity, exploitation and fixes.

Loaded Commerce 1

Exploited only (KEV) →

CVE-2025-66572 Medium · 6.9 CWE-78 Dec 4, 2025

Loaded Commerce 6.6 Client-Side Template Injection (CSTI)

Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.