CVE-2022-25395: Cosmetics And Beauty Product Online Store Project Cosmetics And Beauty Product Online Store

Critical severity, CVSS 9.6. EPSS: 1% chance of exploitation in the next 30 days.

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the search parameter under the /cbpos/ app.

Affected products

Published 2022-03-02. Last modified 2026-06-17.