CVE Intelligence

Vulnerabilidades de Nooncarlett

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nooncarlett: 3 registro(s), com severidade, exploração e correções.

Techstore 3

Somente exploradas (KEV) →

CVE-2025-66845 Média · 6.1 CWE-79 23/12/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.
CVE-2025-63544 Média · 6.1 CWE-79 07/11/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
CVE-2025-63543 Média · 6.1 CWE-79 07/11/2025
Cross-site Scripting (XSS) em Nooncarlett Techstore
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.