CNNVD-202510-3587 Information
Oct 27, 2025
cve
CNNVD ID
CNNVD-202510-3587
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
Wisencode Infotech Wisenshop是印度(Wisencode Infotech)公司的一个在线购物平台。 Wisencode Infotech Wisenshop 20251012及之前版本存在代码注入漏洞,该漏洞源于对文件/support-ticket/create中参数Message的错误操作,可能导致跨站脚本攻击。
Description (English)
Wisencode Infotech Wisenshop is an online shopping platform for Wisencode Infotech. Wisencode Infotech Wisenshop 205510112 and earlier versions had a code-injecting loophole, which stemmed from an error in the Message parameter in the file/support-ticket/create, which could result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
印度
Published
2025-10-27
Last Modified
2026-02-24
References
https://vuldb.com/?submit.673806 https://vuldb.com/?id.329935 https://vuldb.com/?ctiid.329935 https://cxsecurity.com/issue/WLB-2025110002
Share on: