Medium severity6.1NVD Advisory· Published Nov 29, 2025· Updated Apr 15, 2026

CVE-2025-66036

Description

Retro is an online platform providing items of vintage collections. Prior to version 2.4.7, Retro is vulnerable to a cross-site scripting (XSS) in the input handling component. This issue has been patched in version 2.4.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

github.com/Anjaliavv51/Retro/security/advisories/GHSA-gvv6-p6h6-2vj2nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000