Security Advisory

CVE-2025-40647

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-01 12:30:02
Last updated 2025-10-01 13:12:16
Assigner INCIBE
State PUBLISHED

Description

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the email parameter in /index.php?menu=address_book.