Vulnerabilities

TI-2025-41065 CVE-2025-66845 · GHSA-4p2q-qc9w-jq74

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore…

MEDIUM 60

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00218 Published 2025-12-23 No fix listed CWE-79

TI-2025-39363 CVE-2025-63544 · GHSA-fw46-chhq-69jm

LOW 27

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-07 No fix listed CWE-79

TI-2025-39362 CVE-2025-63543 · GHSA-pwp3-72qh-5c9p

LOW 27

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-07 No fix listed CWE-79