CVE-2025-40976

Publication date

2026-01-12 11:27:20

Family

INCIBE

State

PUBLISHED

Description

Stored Cross-Site Scripting (XSS) vulnerability in WorkDos TicketGo, consisting of a lack of proper validation of user input by sending a POST request to ‘/ticketgo-saas/home’, using the ‘description’ parameter.