Vulnerability Description
Loaded Commerce 6.6 contains a client-side template injection vulnerability that allows unauthenticated attackers to execute code on the server via the search parameter.
Related Weaknesses (CWE)
References
- https://loadedcommerce.com/
- https://www.exploit-db.com/exploits/52084
- https://www.vulncheck.com/advisories/loaded-commerce-66-client-side-template-inj
FAQ
What is CVE-2025-66572?
CVE-2025-66572 is a documented vulnerability. Loaded Commerce 6.6 contains a client-side template injection vulnerability that allows unauthenticated attackers to execute code on the server via the search parameter.
How severe is CVE-2025-66572?
CVSS scoring is not yet available for CVE-2025-66572. Check NVD for updates.
Is there a patch for CVE-2025-66572?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.