CVE-2025-40729

Medium CVSS: 4.8

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.

Vendor

Oretnom23

Product

Customer Support System

CWE

CWE-79

Yayın Tarihi

2025-06-16 09:15:19

Güncelleme

2025-10-09 16:44:08

Source Identifier

cve-coordination@incibe.es

KEV Date Added

Kategoriler

CWE-79 Customer Support System MEDIUM Oretnom23 2025

Referanslar

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-customer-support-system

Benzer Kayıtlar

Medium

CVE-2026-30523

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input vali…

Medium

CVE-2026-30522

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validati…

Medium

CVE-2026-30521

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validati…

Medium

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located i…

High

CVE-2026-30534

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via…

Medium

CVE-2026-30527

A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Categ…