Security Advisory

CVE-2025-40641

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-08 11:40:31

Last updated 2025-09-08 11:57:11

Assigner INCIBE

State PUBLISHED

Description

Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the product_name parameter in /Controller_Products/update. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.

← Browse all CVEs View on cve.org ↗