CVE Intelligence

Nooncarlett vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nooncarlett products: 3 record(s), with severity, exploitation and fixes.

Techstore 3

Exploited only (KEV) →

CVE-2025-66845 Medium · 6.1 CWE-79 Dec 23, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.
CVE-2025-63544 Medium · 6.1 CWE-79 Nov 7, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
CVE-2025-63543 Medium · 6.1 CWE-79 Nov 7, 2025
Cross-site Scripting (XSS) in Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.