CVE-2025-63544

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2025-11-07

Last modified

2025-11-12

Weaknesses

CWE-79

Affected products

• Techstore (Nooncarlett)

References

• https://gist.github.com/LuigiGrimaldi/5e9e66b12973bddd35f933a6d0cd2730