CVE-2025-13412

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0

Description A cross site scripting issue exists in Campcodes Retro Basketball Shoes Online Store version 1.0. Manipulation of the product name argument in the /admin/admin running.php file can lead to exploitation. The exploit has been publicly disclosed and may be utilized.

Recommendations Apply any available updates to address the issue in the affected file /admin/admin running.php. As a temporary workaround, sanitize the product name input to prevent the injection of malicious scripts.