VulnerabilityDeferred

CVE-2025-0421

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc.

MEDIUM 4.7EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025.

CVSS 3.1: 4.7 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
EPSS: 0.21% probability · 11th percentile
CISA KEV: Not listed
Weakness: CWE-1021
Source: iletisim@usom.gov.tr

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0402
https://www.usom.gov.tr/bildirim/tr-25-0402

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.