CVE-2025-9237: CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting

Published Aug 20, 2025

Updated

A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/myaccount.php?editaccount of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Codeastro Ecommerce Website

Codeastro Ecommerce Website=1.0

Event History

Aug 20, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 28, 57989

Event

via FIRST·08:59 AM

Frequently Asked Questions

What is the severity of CVE-2025-9237?

CVE-2025-9237 has been classified with a high severity level due to its potential to allow cross-site scripting attacks.

How do I fix CVE-2025-9237?

To fix CVE-2025-9237, ensure proper input validation and sanitization for the Username argument in the Edit Your Account Page.

What systems are affected by CVE-2025-9237?

CVE-2025-9237 affects CodeAstro Ecommerce Website 1.0, specifically the Edit Your Account Page functionality.

What type of attack does CVE-2025-9237 enable?

CVE-2025-9237 enables cross-site scripting attacks, which can compromise user data and session integrity.

Where in the application is CVE-2025-9237 located?

CVE-2025-9237 is located in the /customer/my_account.php?edit_account file of the CodeAstro Ecommerce Website.