6.5
Moyenne
CVE-2025-32170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Motors…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Motors motors-car-dealership-classified-listings allows Stored XSS.This issue affects Motors: from n/a through <= 1.4.71.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Motors 1.4 | premières → 1.4.71 | Pas de correctif indiqué |
Autres CVE de Motors
Les 5 CVE de Motors →
CVE-2026-66693
Subscriber Broken Access Control in Motors <= 1.4.113 versions
6.5
Moyenne
CVE-2025-54691
Authorization Bypass Through User-Controlled Key vulnerability in Stylemix Motors…
5.3
Moyenne
CVE-2025-32654
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
Élevée
CVE-2025-32142
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.8
Élevée