CVE-2025-13186
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A weakness was identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. It impacts an unknown function of the file /dashboard/Ccustomer/manage_customer. Manipulation of the Search argument causes cross site scripting. The attack may be initiated remotely and the exploit is publicly available.
Risk Assessment
A malicious script could execute in the victim's browser, potentially leading to session or data theft. Public exploit availability increases the risk.
Recommendation
Update Isshue to a fixed version or implement input validation and sanitization. Consider deploying a WAF and monitoring for XSS attempts.
Other vulnerabilities in Isshue Multi Store eCommerce Shopping Cart Solution
Original NVD description (English source)
A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This impacts an unknown function of the file /dashboard/Ccustomer/manage_customer. This manipulation of the argument Search causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS