CNNVD-202512-5122 Information
Dec 30, 2025
cve
CNNVD ID
CNNVD-202512-5122
Related CVE
- CNNVD Published: 2025-12-30
Description (Chinese)
product-review是sunhailin12315个人开发者的一个商品评价系统。 product-review存在代码注入漏洞，该漏洞源于对组件Write a Review中参数content的错误操作，可能导致跨站脚本攻击。
Description (English)
Produd-review is a commodity evaluation system for 12315 sunhailin developers. There is a code leak in the program-review, which stems from the error of the parameter content in the Write a Review, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-12-30
Last Modified
2026-02-24
References
https://gitee.com/sunhailin12315/product-review/issues/ICK775 https://vuldb.com/?ctiid.338638 https://vuldb.com/?id.338638
Share on: