CVE-2025-12334

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0

Description A flaw exists in code-projects E-Commerce Website 1.0 that allows for cross site scripting. The issue is located in the /pages/product add.php file. Manipulation of the prod name, prod desc, or prod cost arguments can trigger the flaw. The attack can be launched remotely, and the exploit is publicly available.

Recommendations Apply a fix to the vulnerable file /pages/product add.php to sanitize the prod name, prod desc, and prod cost arguments.