TrustStackSecurity/Advisories

TrustStackSecurity/Advisories

GitHubGitHub
GitHubgithub.com
Releases0
VULNERABILITY DISCLOSURE PROCESS
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-52337↗
6.5 MEDIUM—

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5.0.9.7000 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2025-52338↗
5.3 MEDIUM—

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack.