Security Advisory

CVE-2025-41025

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-20 12:04:05
Last updated 2026-01-20 18:29:13
Assigner INCIBE
CVSS score 5.1
State PUBLISHED

Description

Stored Cross-Site Scripting (XSS) in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows:   'category' y 'product' parameters in '/farm/sell_product.php'.