UNKNOWN NVD

CVE-2025-63607

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitti

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser.

References

https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583

Published: 2026-08-31 · Source: NVD · Feed updated: 2026-08-31

This unknown severity vulnerability was published on 2026-08-31 via NVD.

vulnfeed aggregates 11540 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.