CVE-2025-3560

Name of the Vulnerable Software and Affected Versions: ghostxbh uzy-ssm-mall version 1.0.0

Description: A vulnerability was found in the processing of the file /product, where the manipulation of the product name argument leads to cross-site scripting. The attack may be initiated remotely.

Recommendations: For ghostxbh uzy-ssm-mall version 1.0.0, as a temporary workaround, consider restricting access to the /product endpoint or sanitizing the product name argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.