CVE-2025-66036 — Retro is vulnerable to XSS vulnerability in input handling component

CVE-2025-66036

Retro is vulnerable to XSS vulnerability in input handling component PUBLISHED

Description (CNA)

Retro is an online platform providing items of vintage collections. Prior to version 2.4.7, Retro is vulnerable to a cross-site scripting (XSS) in the input handling component. This issue has been patched in version 2.4.7.

Affected (CNA)

Vendor / product	Versions
Anjaliavv51 / Retro	affected < 2.4.7

CWE

CWE-79

References

https://github.com/Anjaliavv51/Retro/security/advisories/GHSA-gvv6-p6h6-2vj2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.