CVE-2025-13412: Campcodes Retro Basketball Shoes Online Store admin_running.php cross site scripting
A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/adminrunning.php. Executing a manipulation of the argument productname can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13412?
CVE-2025-13412 is classified as a cross-site scripting (XSS) vulnerability which can lead to potential data exposure.
What is affected by CVE-2025-13412?
CVE-2025-13412 affects the Campcodes Retro Basketball Shoes Online Store 1.0, specifically through the /admin/admin_running.php file.
How do I fix CVE-2025-13412?
To fix CVE-2025-13412, sanitize user inputs in the product_name argument to prevent execution of arbitrary scripts.
What type of attack does CVE-2025-13412 facilitate?
CVE-2025-13412 facilitates cross-site scripting (XSS) attacks that allow attackers to execute scripts in the context of a user's session.
Can CVE-2025-13412 be exploited remotely?
Yes, CVE-2025-13412 can be exploited remotely by an attacker who manipulates the product_name parameter.