CVE-2025-1114 | newbee-mall 1.0 Add Category Page /admin/categories/save categoryName cross site scripting

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting.

This vulnerability is traded as CVE-2025-1114. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.