CVE-2026-3320
NONE—CVSS v3
—CVSS v2
0.06%
EPSS (exploit probability)
CWE-79CWE
Description
Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform. User-controlled input is insecurely reflected in the HTML output in the endpoint /product/. Exploitation of this vulnerability would allow an attacker to execute arbitrary JavaScript code.
Affected routers (0)
No routers currently mapped to this CVE in our database.