CVE-2025-9237mediumCWE-79CWE-94

CVE-2025-9237: falha de média gravidade em CodeAstro Ecommerce Website

CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting

Publicada em

Seguir esta CVE+ Monitorar Ecommerce Website

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.3%
A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/my_account.php?edit_account of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
CodeAstro · Ecommerce Website
CVEs relacionadas — CodeAstro Ecommerce Website

No mesmo produto, das mais perigosas para as menos.

CVE-2026-14799MEDIUMCodeAstro Ecommerce Website my_account.php sql injectionEPSS 0.3%CVE-2026-14767MEDIUMCodeAstro Ecommerce Website POST Parameter confirm.php sql injectionEPSS 0.3%CVE-2026-14639MEDIUMCodeAstro Ecommerce Website my_account.php sql injectionEPSS 0.3%