Nooncarlett

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nooncarlett records in CISA KEV

No Nooncarlett vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2025-41065 CVE-2025-66845 · GHSA-4p2q-qc9w-jq74

MEDIUM 60

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00218 Published 2025-12-23 No fix listed CWE-79

TI-2025-39363 CVE-2025-63544 · GHSA-fw46-chhq-69jm

LOW 27

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-07 No fix listed CWE-79

TI-2025-39362 CVE-2025-63543 · GHSA-pwp3-72qh-5c9p

LOW 27

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-07 No fix listed CWE-79