CVE-2025-0879

MEDIUM 4.7

XSS in Shopside Software's Shopside App

CVSS Score

4.7

EPSS Score

0.1%

EPSS Percentile

20th

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Shopside Software Shopside App allows Cross-Site Scripting (XSS). This issue requires high privileges. This issue affects Shopside App: before 17.02.2025.

CWE	CWE-79
Vendor	shopside software
Product	shopside app
Published	Sep 17, 2025
Last Updated	Jun 6, 2026

Stay Ahead of the Next One

Get instant alerts for shopside software shopside app

Be the first to know when new medium vulnerabilities affecting shopside software shopside app are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Affected Versions

Shopside Software / Shopside App

0 < 17.02.2025

References

NVD ↗ CVE.org ↗ EPSS Data ↗

usom.gov.tr: https://www.usom.gov.tr/bildirim/tr-25-0270 siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0270

Credits

Berat Arslan