CVE-2025-7410: code-projects LifeStyle Store cart_remove.php sql injection

Published Jul 10, 2025

Updated

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unknown function of the file /cartremove.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects LifeStyle Store

Anisha Lifestyle Store=1.0

Event History

Jul 10, 2025

CVE Published

via MITRE·05:02 PM

Data Sourced

via MITRE·05:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 21, 57581

Event

via FIRST·02:35 PM

Frequently Asked Questions

What is the severity of CVE-2025-7410?

CVE-2025-7410 has been classified as a critical severity vulnerability.

What type of vulnerability is CVE-2025-7410?

CVE-2025-7410 is an SQL injection vulnerability in the /cart_remove.php file.

Who is affected by CVE-2025-7410?

CVE-2025-7410 affects the LifeStyle Store version 1.0 developed by code-projects.

How can I exploit CVE-2025-7410?

CVE-2025-7410 can be exploited remotely by manipulating the ID argument in the affected function.

How do I fix CVE-2025-7410?

To fix CVE-2025-7410, input validation should be implemented to sanitize the ID parameter in /cart_remove.php.