Skip to main content
Radar
DashboardThreatsMapFeedsAPI
reconnecting

CVE-2025-48296: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in skygroup UpStore

High
VulnerabilityCVE-2025-48296cvecve-2025-48296cwe-79
Published: Wed Aug 20 2025 (08/20/2025, 08:03:25 UTC)
Source: CVE Database V5
Vendor/Project: skygroup
Product: UpStore

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore allows Reflected XSS. This issue affects UpStore: from n/a through 1.7.0.

Technical Details

Data Version
5.1
Assigner Short Name
Patchstack
Date Reserved
2025-05-19T14:13:37.940Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 68a584b4ad5a09ad0002e2d8

Added to database: 8/20/2025, 8:17:56 AM

Last updated: 8/20/2025, 8:17:56 AM

Views: 1

Related Threats

CVE-2025-55715: CWE-201 Insertion of Sensitive Information Into Sent Data in Themeisle Otter - Gutenberg Block

High
VulnerabilityWed Aug 20 2025

CVE-2025-54750: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') in FunnelKit Funnel Builder by FunnelKit

High
VulnerabilityWed Aug 20 2025

CVE-2025-54735: CWE-266 Incorrect Privilege Assignment in Emraan Cheema CubeWP Framework

High
VulnerabilityWed Aug 20 2025

CVE-2025-54726: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Miguel Useche JS Archive List

Critical
VulnerabilityWed Aug 20 2025

CVE-2025-54713: CWE-288 Authentication Bypass Using an Alternate Path or Channel in magepeopleteam Taxi Booking Manager for WooCommerce

Critical
VulnerabilityWed Aug 20 2025

Actions

Please log in to the Console to use AI analysis features.

Need enhanced features?

Contact root@offseq.com for Pro access with improved analysis and higher rate limits.

Latest Threats