CVE-2025-0421CWE-1021

CVE-2025-0421

Medium · published November 19, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay.

This issue affects Shopside: through 05022025.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2025-11-19T19:15Z
References (2)
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0402 · [email protected]https://www.usom.gov.tr/bildirim/tr-25-0402 · [email protected]
EPSS history
Timeline
  • 19 NOV 13:28Z
    iFrame Injection in Mikrogrup's Shopside
    cvelistv5