CVE-2025-13239: Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow

Published Nov 16, 2025

Updated

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submitcheckout. Such manipulation of the argument ordertotalamount/carttotalamount leads to enforcement of behavioral workflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

BDTASK Isshue Multi Store eCommerce Shopping Cart Solution

BDTASK Isshue=5.0

Event History

Nov 16, 2025

CVE Published

via MITRE·06:02 AM

Data Sourced

via MITRE·06:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13239?

CVE-2025-13239 has a medium severity rating due to potential impacts on eCommerce transactions.

How do I fix CVE-2025-13239?

To fix CVE-2025-13239, ensure validation of input parameters in the /submit_checkout functionality to prevent manipulation of order totals.

What systems are affected by CVE-2025-13239?

CVE-2025-13239 affects Bdtask Isshue Multi Store eCommerce Shopping Cart Solution.

What type of vulnerability is CVE-2025-13239?

CVE-2025-13239 is a security vulnerability that involves improper handling of order total parameters.

Is there a known exploit for CVE-2025-13239?

Yes, exploits for CVE-2025-13239 may allow attackers to manipulate transactions and affect order integrity.