Security Advisory

CVE-2025-40679

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-20 11:53:39

Last updated 2026-01-20 18:50:40

Assigner INCIBE

CVSS score 5.1

State PUBLISHED

Description

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.

← Browse all CVEs View on cve.org ↗