CVE-2025-65341 identifies a Cross Site Scripting (XSS) vulnerability in the Ecommerce Fruits Bazar 1.0 application, specifically within the admin/edit_product.php script. This vulnerability is classified under CWE-79 and allows an attacker to inject and execute arbitrary scripts in the context of the affected web application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The impact includes limited confidentiality and integrity loss but no availability impact. No official fix or patch has been documented as of the publication date.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser session when interacting with the vulnerable admin interface. This may lead to limited confidentiality and integrity impacts such as theft of session tokens or manipulation of displayed content. There is no indication of availability impact or privilege escalation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider limiting access to the affected admin interface and applying web application firewall (WAF) rules to detect and block suspicious input patterns targeting the edit_product.php page. Avoid clicking on untrusted links that could trigger the vulnerability.