Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-12335

code-projects E-Commerce Website supplier_update.php cross site scripting

Description

A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

code-projects E-Commerce Website

  • 1.0affected

References