Vulnerability Description
Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.
Related Weaknesses (CWE)
References
- https://loadedcommerce.com/
- https://www.exploit-db.com/exploits/52084
- https://www.vulncheck.com/advisories/loaded-commerce-66-client-side-template-inj
FAQ
What is CVE-2025-66572?
CVE-2025-66572 is a documented vulnerability. Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context whe...
How severe is CVE-2025-66572?
CVSS scoring is not yet available for CVE-2025-66572. Check NVD for updates.
Is there a patch for CVE-2025-66572?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.