Vulnerabilidades do Nooncarlett Techstore
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nooncarlett Techstore: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:nooncarlett:techstore
CVE-2025-66845
Média · 6.1
CWE-79 23/12/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.
CVE-2025-63544
Média · 6.1
CWE-79 07/11/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
CVE-2025-63543
Média · 6.1
CWE-79 07/11/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.