CVE-2025-12267

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

• CWE-79
• CWE-94

• https://vuldb.com/?ctiid.329939
• https://vuldb.com/?id.329939
• https://vuldb.com/?submit.673717
• https://www.codester.com/items/comments/58847/modern-shop-php-ecommerce-platform

Published

Oct 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12261A vulnerability was found in CodeAstro Gym Management System…8.8
• CVE-2025-12262A vulnerability was determined in code-projects Online Event…8.8
• CVE-2025-12263A vulnerability was identified in code-projects Online Event…8.8
• CVE-2025-12264A security flaw has been discovered in Wisencode up to 20251…5.1
• CVE-2025-12265A weakness has been identified in Tenda CH22 1.0.0.1. Affect…9.8
• CVE-2025-12266A vulnerability was detected in Zytec Dalian Zhuoyun Technol…6.3
• CVE-2025-12268A vulnerability has been found in LearnHouse up to 98dfad76a…9.8
• CVE-2025-12269A vulnerability was found in LearnHouse up to 98dfad76aad707…5.4
• CVE-2025-1227A vulnerability was found in ywoa up to 2024.07.03. It has b…8.8
• CVE-2025-12270A vulnerability was determined in LearnHouse up to 98dfad76a…7.5
• CVE-2025-12271A vulnerability was identified in Tenda CH22 1.0.0.1. This a…9.8
• CVE-2025-12272A security flaw has been discovered in Tenda CH22 1.0.0.1. T…9.8