CVE-2025-5303

Name of the Vulnerable Software and Affected Versions LTL Freight Quotes – Freightview Edition versions 1.0.11 and earlier LTL Freight Quotes – Daylight Edition versions 2.2.6 and earlier LTL Freight Quotes – Day & Ross Edition versions 2.1.10 and earlier

Description The issue is related to Stored Cross-Site Scripting via the expiry date parameter due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Recommendations For LTL Freight Quotes – Freightview Edition versions 1.0.11 and earlier, update to a version later than 1.0.11 to resolve the issue. For LTL Freight Quotes – Daylight Edition versions 2.2.6 and earlier, update to a version later than 2.2.6 to resolve the issue. For LTL Freight Quotes – Day & Ross Edition versions 2.1.10 and earlier, update to a version later than 2.1.10 to resolve the issue. As a temporary workaround, consider restricting access to the expiry date parameter to minimize the risk of exploitation.