Low severity3.5NVD Advisory· Published Feb 20, 2026· Updated Apr 29, 2026
CVE-2025-15583
CVE-2025-15583
Description
A weakness has been identified in detronetdip E-commerce 1.0.0. This affects the function get_safe_value of the file utility/function.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
1- cpe:2.3:a:detronetdip:e-commerce:1.0.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/detronetdip/E-commerce/issues/23nvdExploitIssue TrackingVendor Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
14- Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout SkimmingThe Hacker News · May 16, 2026
- Funnel Builder WordPress plugin bug exploited to steal credit cardsBleepingComputer · May 15, 2026
- Avada Builder WordPress plugin flaws allow site credential theftBleepingComputer · May 15, 2026
- 18-year-old NGINX vulnerability allows DoS, potential RCEBleepingComputer · May 14, 2026
- Škoda warns of customer data breach after online shop hackBleepingComputer · May 12, 2026
- New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network PivotsThe Hacker News · May 12, 2026
- SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANABleepingComputer · May 12, 2026
- Trellix source code breach claimed by RansomHouse hackersBleepingComputer · May 8, 2026
- Websites with an undefined trust level: avoiding the trapSecurelist · May 6, 2026
- Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701MThe Hacker News · May 4, 2026
- That AI Extension Helping You Write Emails? It’s Reading Them FirstUnit 42 · Apr 30, 2026
- UK Biobank Data Breach: Health Data of 500,000 Listed for Sale in ChinaInfosecurity Magazine · Apr 24, 2026
- Medical data of 500,000 UK volunteers listed for sale on AlibabaMalwarebytes Labs · Apr 24, 2026
- Researchers Warn of Global Surge in Fake Shipment Tracking ScamsInfosecurity Magazine · Mar 16, 2026