CVE-2025-13186: Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/managecustomer. This manipulation of the argument Search causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13186?
CVE-2025-13186 is considered to have a moderate severity due to its potential to allow cross site scripting (XSS) attacks.
How do I fix CVE-2025-13186?
To fix CVE-2025-13186, ensure that input validation and output encoding are implemented to sanitize the 'Search' argument in the /dashboard/Ccustomer/manage_customer file.
Which software is affected by CVE-2025-13186?
CVE-2025-13186 affects Bdtask Isshue Multi Store eCommerce Shopping Cart Solution version 4.0 and below.
What type of vulnerability is CVE-2025-13186?
CVE-2025-13186 is categorized as a cross site scripting (XSS) vulnerability, which may allow attackers to inject malicious scripts.
What are the potential impacts of CVE-2025-13186?
The potential impacts of CVE-2025-13186 include theft of user data, session hijacking, and defacement of web pages.