https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T22:05:54.413964+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66572 CVE-2025-66572 — Loaded Commerce 6.6 Client-Side Template Injection (CSTI) 2026-10-16T22:05:54.415664+00:00

Affected: loadedcommerce Loaded Commerce

Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in the victim's browser context when they visit a crafted URL.