medium6.5
CVE-2025-32195
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shoppin…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Stored XSS.This issue affects Ecwid Shopping Cart: from n/a through <= 7.0.
Affected products
| Product | Affected versions |
|---|---|
| Ecwid Shopping Cart: From N/A Through | through 7.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.