Approved changes feed: RSS · Atom

cpe:2.3:a:sui_shang_information_technology:suishang_enterprise-level_b2b2c_multi-user_mall_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSui Shang Information Technology (54c8ca54-4443-5b7d-b5b2-e57e08189a6d)
ProductSuishang Enterprise Level B2B2C Multi User Mall System (0bf22e1a-a44f-5841-932e-3f5b939ba614)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12290 vulnerable 2026-06-08 07:04:29.987458 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 359 cross site scripting
MEDIUM (4.3)
A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-27T15:02:08.700Z
Updated: 2025-10-27T15:55:50.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12289 vulnerable 2026-06-08 07:04:29.987052 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1001 cross site scripting
MEDIUM (4.3)
A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activity_state/1/category_id/1001. Executing manipulation of the argument category_id can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-27T15:02:05.980Z
Updated: 2025-10-27T15:55:56.418Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.