CVE-2025-13423

MEDIUM

Campcodes Retro Basketball Shoes Onli... - Improper Access Control

Title source: rule

Description

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.

References (5)

Scores

CVSS v3 4.7
EPSS 0.0005
EPSS Percentile 16.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-284 CWE-434
Status published

Affected Products (1)

campcodes/retro_basketball_shoes_online_store

Timeline

Published Nov 20, 2025
Tracked Since Feb 18, 2026