CE-PhoenixCart PhoenixCart

• CVE-2025-47289 Medium 6.3 Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly Flag 0.3%
• CVE-2025-47272 Medium 5.5 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation 0.2%