CNNVD-202510-3587 Information

CNNVD ID

CNNVD-202510-3587

CVE-2025-12264

  • CNNVD Published: 2025-10-27

Description (Chinese)

Wisencode Infotech Wisenshop是印度(Wisencode Infotech)公司的一个在线购物平台。 Wisencode Infotech Wisenshop 20251012及之前版本存在代码注入漏洞,该漏洞源于对文件/support-ticket/create中参数Message的错误操作,可能导致跨站脚本攻击。

Description (English)

Wisencode Infotech Wisenshop is an online shopping platform for Wisencode Infotech. Wisencode Infotech Wisenshop 205510112 and earlier versions had a code-injecting loophole, which stemmed from an error in the Message parameter in the file/support-ticket/create, which could result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

印度

Published

2025-10-27

Last Modified

2026-02-24

References

https://vuldb.com/?submit.673806 https://vuldb.com/?id.329935 https://vuldb.com/?ctiid.329935 https://cxsecurity.com/issue/WLB-2025110002

Share on: