Nooncarlett Techstore
3 CVEs affecting Nooncarlett Techstore. Latest disclosed: 2025-12-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-66845 | Medium | 6.1 | 2025-12-23 | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter direc… |
CVE-2025-63544 | Medium | 6.1 | 2025-11-07 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter. |
CVE-2025-63543 | Medium | 6.1 | 2025-11-07 | TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter. |