CVE-2025-1155

Summary

CVE-2025-1155 is a recently identified vulnerability affecting Webkul QloApps 1.6.1. The issue resides in the "Your Location Search" component's "/stores" file, which is classified as problematic. An attacker can exploit this vulnerability to execute cross-site scripting (XSS) attacks remotely. Although plans are underway to remove the affected page in the future, it is crucial that users address this vulnerability promptly to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.