Skip to content
OpenAdvisories

Vendor

loadedcommerce

1 known vulnerabilities.

Products

Loaded Commerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66572

    Loaded Commerce 6.6 Client-Side Template Injection (CSTI)

    Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.

    loadedcommerce Loaded Commerce