CVE-2025-12333

32th percentile - higher than 32% of all known CVEs

A vulnerability has been found in code-projects E-Commerce Website 1.0 affecting an unknown function of the file /pages/supplier_add.php. Manipulation of the supp_name/supp_address arguments leads to cross site scripting. The attack can be initiated remotely and the exploit has been disclosed to the public.

An attacker can remotely inject malicious script that executes in the victim's browser, potentially leading to session theft, redirections, or defacement. The public exploit increases the risk of exploitation.

Update the application to a version that fixes the vulnerability or apply input validation and sanitization for the supp_name and supp_address arguments. Implement CSP headers and monitor for unusual requests.