github.comexploitissue tracking
https://github.com/4m3rr0r/PoCVulDb/issues/7 CVE-2025-13239
MEDIUM
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
Record summary
CVE-2025-13239 has a selected CVSS score of 5.3 (medium).
Description
A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submit_checkout. Such manipulation of the argument order_total_amount/cart_total_amount leads to enforcement of behavioral workflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 17, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Isshue Multi Store eCommerce Shopping Cart SolutionBrowse Bdtask / Isshue Multi Store eCommerce Shopping Cart Solution | CVE List | 5 | affected |
Isshue Multi Store eCommerce Shopping Cart SolutionBrowse CodeCanyon / Isshue Multi Store eCommerce Shopping Cart Solution | CVE List | 5 | affected |
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-13239 VDB-332565 | CTI Indicators (IOB, IOC, IOA)signaturepermissions required
https://vuldb.com/?ctiid.332565 VDB-332565 | Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflowvdb entryTechnical description
https://vuldb.com/?id.332565 Submit #686896 | Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution With POS v5 Business Logic FlawThird-party advisory
https://vuldb.com/?submit.686896