← CVE Intelligence

CVE-2025-12267

abhicodebox ModernShop search cross site scripting PUBLISHED

Description (CNA)

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

Affected (CNA)

Vendor / productVersions
abhicodebox / ModernShopaffected 20250922

CWE

CWE-79, CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.