Description
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser.
Medium · 6.1
CVE-2025-63607
EUVD-2025-210815GHSA-j8wf-qxgq-3c7m
TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the re…
Published Aug 31, 2026 · Updated Sep 1, 2026 · Assigned by mitre