This vulnerability (CVE-2025-8079) involves improper input sanitization in Smart Trade E-Commerce software before version 4.5.0.0.1, leading to reflected Cross-site Scripting (CWE-79). An attacker could exploit this by injecting malicious scripts into web pages generated by the application, potentially affecting users who interact with crafted URLs or inputs. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with limited confidentiality and integrity impact and no availability impact.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality and integrity impacts such as session hijacking or content manipulation. There is no reported impact on system availability. The overall severity is medium based on the CVSS score of 4.6. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — no official patch or vendor advisory is currently available. It is recommended to monitor the vendor's communications for updates or patches addressing this vulnerability. Until a fix is released, consider applying input validation and output encoding controls where possible to mitigate reflected XSS risks in the affected versions.