medium4.3
CVE-2025-12335
A vulnerability was determined in code-projects E-Commerce Website 1.0.
Impact
A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fabian | E-Commerce Website | Version 1.0 |