CVE-2025-61549

Name of the Vulnerable Software and Affected Versions edu Business Solutions Print Shop Pro WebDesk version 18.34

Description A cross-site scripting (XSS) issue exists due to unsanitized user input reflected in HTTP responses without proper HTML encoding or escaping. The issue is present on the LoginID parameter on the /PSP/app/web/reg/reg display.asp endpoint. This allows attackers to execute arbitrary JavaScript in the context of a victim’s browser session.

Recommendations Apply appropriate HTML encoding or escaping to the LoginID parameter on the /PSP/app/web/reg/reg display.asp endpoint to prevent the injection of malicious scripts.