CVE-2025-12335

32th percentile - higher than 32% of all known CVEs

A vulnerability was determined in code-projects E-Commerce Website 1.0 affecting an unknown functionality of the file /pages/supplier_update.php. Manipulation of the supp_name/supp_address arguments causes cross site scripting. The attack can be initiated remotely and the exploit has been publicly disclosed.

An attacker can remotely inject malicious script that executes in the victim's browser, potentially leading to session theft, redirections, or defacement. The public exploit increases the risk of exploitation.

Update the application to a version that fixes the vulnerability or apply input validation and sanitization for the supp_name and supp_address arguments. Implement CSP headers and monitor for unusual requests.