bidorbuy Store Integrator vulnerabilities

2 known vulnerabilities in bidorbuy Store Integrator from Extremeidea. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  bidorbuy Store Integrator: Improper Neutralization of Input During Web Page Generation

  CVE-2025-68883Jan 22, 2026Extremeidea

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Reflected XSS.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.

• 9.1 Critical severity

  bidorbuy Store Integrator: Improper Control of Generation of Code

  CVE-2025-48100Aug 28, 2025Extremeidea

  Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code Inclusion.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.