PT-2026-3552 · Bdtask · Isshue
CVE-2025-40679
·
Publicado
2026-01-20
·
Atualizado
2026-01-20
CVSS v4.0
5.1
Média
| Vetor | AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N |
Name of the Vulnerable Software and Affected Versions
Isshue by Bdtask (affected versions not specified)
Description
An HTML injection issue exists in Isshue by Bdtask due to insufficient validation of user-supplied data. The issue occurs when sending a POST request to the
/category product search API endpoint, specifically through the product name parameter. This allows for the injection of arbitrary HTML code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Isshue