Nooncarlett Techstore — known CVE vulnerabilities

Every CVE whose affected-product data names Nooncarlett Techstore, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-63543 — CVSS 6.1 (medium): TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.
• CVE-2025-63544 — CVSS 6.1 (medium): TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.
• CVE-2025-66845 — CVSS 6.1 (medium): A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id…