CVE-2025-3560

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-3560

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3560.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3560

Published

2025-04-14T09:31:07Z

Modified

2026-10-28T02:30:58Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

ghostxbh uzy-ssm-mall product cross site scripting

Details

A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /product. The manipulation of the argument product_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3560.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.0.0"
                        },
                        {
                            "last_affected": "1.0.0"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/ghostxbh/uzy-ssm-mall

Affected ranges

Type

GIT

Repo

https://github.com/ghostxbh/uzy-ssm-mall

Events

Introduced

a93d48f7eb212e219679a046f4bd484c43420e24

Last Affected

a93d48f7eb212e219679a046f4bd484c43420e24

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.0.0:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.0"
                },
                {
                    "last_affected": "1.0.0"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

1.*

1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3560.json"