CVE-2025-55998

n/a / n/a PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.mezereon.com/shopify/#intro
https://github.com/Ocmenog/CVE-2025-55998

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.