PT-2025-49920 · WordPress · Get Bowtied Shopkeeper Extender
CVE-2025-67544
·
Published
2025-12-09
·
Updated
2025-12-15
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Get Bowtied Shopkeeper Extender versions prior to 7.0
Description
The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the target web server and executed by users who visit the affected web pages.
Recommendations
Update Get Bowtied Shopkeeper Extender to version 7.0 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Get Bowtied Shopkeeper Extender