CVE-2025-0175: code-projects Online Shop view.php cross site scripting
A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument name/details leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0175?
CVE-2025-0175 is classified as a problematic vulnerability that could lead to cross-site scripting attacks.
How do I fix CVE-2025-0175?
To fix CVE-2025-0175, ensure proper input validation and sanitization of the 'name/details' arguments in the /view.php file.
Who is affected by CVE-2025-0175?
CVE-2025-0175 affects users of the code-projects Online Shop version 1.0.
What type of attack can be initiated through CVE-2025-0175?
CVE-2025-0175 can be exploited to perform cross-site scripting (XSS) attacks remotely.
What are the consequences of exploiting CVE-2025-0175?
Exploiting CVE-2025-0175 can lead to unauthorized access and manipulation of user sessions, allowing attackers to execute malicious scripts.