CNNVD-202511-1777 Information
CNNVD ID
CNNVD-202511-1777
Related CVE
- CNNVD Published: 2025-11-15
Description (Chinese)
Code-Projects Simple Cafe Ordering System是Code-Projects开源的一个简易咖啡点餐系统。 Code-Projects Simple Cafe Ordering System 1.0版本存在代码注入漏洞，该漏洞源于文件/add_to_cart中参数product_name的错误操作，可能导致跨站脚本。
Description (English)
Code-Projects Simple Cafe Ordering Systems is a simple coffee snack system open to Code-Projects. The Code-Projects Simple Cafe Ordering System Version 1.0 contains a code-injection loophole, which results from the error of the parameter program name in the file/add to cart, which may result in a cross-site script.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Code-Projects
Published
2025-11-15
Last Modified
2026-02-24
References
https://code-projects.org/ https://github.com/shenxianyuguitian/cafeorder_vuln_XSS/blob/main/README.md https://vuldb.com/?ctiid.332500 https://vuldb.com/?id.332500 https://vuldb.com/?submit.685729 https://access.redhat.com/security/cve/cve-2025-13202
Share on: