CVE-2025-40729

Name of the Vulnerable Software and Affected Versions Customer Support System version 1.0

Description The issue is related to a Reflected Cross-Site Scripting (XSS) in the /customer support/index.php endpoint, which allows remote attackers to execute arbitrary code via the page parameter. This enables attackers to inject malicious scripts into the webpage, potentially leading to unauthorized actions.

Recommendations For Customer Support System version 1.0, consider disabling access to the /customer support/index.php endpoint until a patch is available, or restrict the use of the page parameter to minimize the risk of exploitation.