CVE-2025-66572

Publication date

2025-12-04 20:44:50

Family

VulnCheck

State

PUBLISHED

Description

Loaded Commerce 6.6 contains a client-side template injection vulnerability that allows unauthenticated attackers to execute code on the server via the search parameter.