Nooncarlett

nooncarlett

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-66845 1Nooncarlett 1Techstore Jun 17, 2026 Dec 23, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitiz...Show more A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.Show less
CVE-2025-63544 1Nooncarlett 1Techstore Jun 17, 2026 Nov 7, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
CVE-2025-63543 1Nooncarlett 1Techstore Jun 17, 2026 Nov 7, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.