CVE Intelligence

Vulnerabilidades do Loadedcommerce Loaded Commerce

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Loadedcommerce Loaded Commerce: 1 registro(s), com versões afetadas e correções.

CVE-2025-66572 Média · 6.9 CWE-78 04/12/2025
Loaded Commerce 6.6 Client-Side Template Injection (CSTI)
Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.