Cross-site Scripting Vulnerability in Gift Hunt by Ecommerce Platforms

CVE-2025-67631

What is CVE-2025-67631?

The Gift Hunt plugin by Ecommerce Platforms contains a vulnerability that allows for Stored Cross-site Scripting (XSS), leading to improper neutralization of input during web page generation. This flaw affects Gift Hunt versions up to and including 2.0.2, enabling attackers to inject malicious scripts that can be executed in the browser of users who visit the compromised web pages. Such vulnerabilities pose significant risks as they may lead to data theft, session hijacking, and unauthorized access to user information, further underlining the importance of implementing security measures to safeguard web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References