Cross-Site Scripting Vulnerability in Bhabishya-123 E-commerce by Tansique
CVE-2025-61456
Currently unrated
Key Information:
- Vendor
Tansique
- Status
- Vendor
- CVE Published:
- 20 October 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-61456?
A Cross-Site Scripting (XSS) vulnerability is present in the Bhabishya-123 E-commerce 1.0 application, specifically affecting the index endpoint. This vulnerability arises due to the lack of input sanitization for the /index parameter, enabling attackers to inject malicious JavaScript. When unsuspecting users click on a crafted link or submit a manipulated request, the injected script executes within their browsers, potentially compromising sensitive user information and undermining the integrity of the web application.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.