Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-0879 EUVD-2025-29717GHSA-qp68-3cm6-cf7j

XSS in Shopside Software's Shopside App

Published Sep 17, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Shopside Software Shopside App allows Cross-Site Scripting (XSS). This issue requires high privileges.

This issue affects Shopside App: before 17.02.2025.

Affected products

VendorProductAffectedFixed
Shopside Software Shopside App < 17.02.2025 17.02.2025

References