Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-66036 EUVD-2025-199889

Retro is vulnerable to XSS vulnerability in input handling component

Published Nov 29, 2025 · Updated Dec 1, 2025 · Assigned by GitHub_M

Description

Retro is an online platform providing items of vintage collections. Prior to version 2.4.7, Retro is vulnerable to a cross-site scripting (XSS) in the input handling component. This issue has been patched in version 2.4.7.

Affected products

VendorProductAffectedFixed
Anjaliavv51 Retro < 2.4.7 —

References