Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-9845

Опубликовано: 03 сент. 2025
Источник: nvd
CVSS3: 3.5
CVSS3: 5.4
CVSS2: 4
EPSS Низкий

Описание

A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument product_code/gen_name/product_name/supplier leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:carmelo:fruit_shop_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%
0.00032
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79
CWE-79

EPSS

Процентиль: 8%
0.00032
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79
CWE-79