Threats tagged 'ghsa-q252-w8cv-75jr'

A security vulnerability (CVE-2025-13239) affects Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. The issue involves manipulation of the order_total_amount or cart_total_amount parameters in the /submit_checkout file, which can alter the behavioral workflow of the application. The vulnerability can be exploited remotely and has been publicly disclosed. The vendor has not responded to the disclosure. The CVSS score is 4.3, indicating medium severity with low complexity and no user interaction required.