https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66845.htmlhttps://patchthecve.com/cve/CVE-2025-66845.htmlWed, 17 Jun 2026 09:57:16 +0000MEDIUM 6.1: A reflected Cross-Site Scripting (XSS) vulnerability has been identified in TechStore version 1.0. The user_name endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser.https://patchthecve.com/cve/CVE-2025-63544.htmlhttps://patchthecve.com/cve/CVE-2025-63544.htmlWed, 17 Jun 2026 09:53:14 +0000MEDIUM 6.1: TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in /order_notes via the id parameter.https://patchthecve.com/cve/CVE-2025-63543.htmlhttps://patchthecve.com/cve/CVE-2025-63543.htmlWed, 17 Jun 2026 09:53:14 +0000MEDIUM 6.1: TechStore 1.0 is vulnerable to Cross Site Scripting (XSS) in the /search_results endpoint via the q parameter.