CVE-2025-40701 in Soteshop
Tóm tắt
Bởi MITRE • 23/02/2026
Reflected Cross-Site Scripting vulnerability in SOTESHOP, version 8.3.4. THis vulnerability allows an attacker execute JavaScript code in the victim's browser when a malicious URL with the 'id' parameter in '/adsTracker/checkAds' is sent to the victim. The vulnerability can be exploited to steal sensitive user information such as session cookies, or to perform actions on their behalf.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.