PT-2025-47534
CVE-2025-13412
·
Published
2025-11-19
·
Updated
2025-11-24
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Campcodes Retro Basketball Shoes Online Store version 1.0
Description
A cross site scripting issue exists in Campcodes Retro Basketball Shoes Online Store version 1.0. Manipulation of the
product name argument in the /admin/admin running.php file can lead to exploitation. The exploit has been publicly disclosed and may be utilized.Recommendations
Apply any available updates to address the issue in the affected file
/admin/admin running.php.
As a temporary workaround, sanitize the product name input to prevent the injection of malicious scripts.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾