What is GHSA-j8wf-qxgq-3c7m?

GHSA-j8wf-qxgq-3c7m is a security advisory published by GitHub Security Advisories with Medium severity. TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application...

Which CVE IDs does GHSA-j8wf-qxgq-3c7m cover?

GHSA-j8wf-qxgq-3c7m covers the following CVE IDs: CVE-2025-63607. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j8wf-qxgq-3c7m?

GHSA-j8wf-qxgq-3c7m has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-j8wf-qxgq-3c7mMediumCVSS 6.1

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application...

Vendor

GitHub Security Advisories

Published

August 31, 2026

Last Modified

September 1, 2026

🔗 CVE IDs covered (1)

CVE-2025-63607 →

📋 Description

TechStore 1.0 is vulnerable to Cross Site Scripting (XSS). In contact_display, the application echoes the id parameter verbatim into the rendered page, permitting execution of attacker-supplied JavaScript in users browser.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-63607
https://gist.github.com/7Horrus/7c419516b064f6bac638736819e24583
https://github.com/advisories/GHSA-j8wf-qxgq-3c7m