CVE-2025-66845

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://gist.github.com/MuratSevri/d78efed86ca5f82e8a6683ace5061319	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:nooncarlett:techstore:1.0:*:*:*:*:*:*:*

History

04 Nov 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad reflejada Cross-site Scripting (XSS) ha sido identificada en TechStore versión 1.0. El endpoint user_name refleja el parámetro de consulta id directamente en la respuesta HTML sin codificación de salida ni sanitización, lo que permite la ejecución de código JavaScript arbitrario en el navegador de la víctima.

Information

Published : 2025-12-23 14:16

Updated : 2026-11-04 22:10

NVD link : CVE-2025-66845

Mitre link : CVE-2025-66845

CVE.ORG link : CVE-2025-66845

JSON object : View

Products Affected

nooncarlett

techstore

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-66845", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66845", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-23T14:46:26.655590Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-23T14:16:40.260", "references": [{"url": "https://gist.github.com/MuratSevri/d78efed86ca5f82e8a6683ace5061319", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim\u2019s browser."}, {"lang": "es", "value": "Una vulnerabilidad reflejada Cross-site Scripting (XSS) ha sido identificada en TechStore versi\u00f3n 1.0. El endpoint user_name refleja el par\u00e1metro de consulta id directamente en la respuesta HTML sin codificaci\u00f3n de salida ni sanitizaci\u00f3n, lo que permite la ejecuci\u00f3n de c\u00f3digo JavaScript arbitrario en el navegador de la v\u00edctima."}], "lastModified": "2026-11-04T22:10:00.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nooncarlett:techstore:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52E5844D-E842-471F-AB10-162145F07E77"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}