CVE-2025-59756

Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03

Description A cross-site scripting issue exists in AndSoft e-TMS version 25.03. This allows an attacker to execute JavaScript code in a victim’s browser by sending a malicious URL. The vulnerability is reflected through the l, demo, demo2, TNTLOGIN, UO, and SuppConn parameters within the '/clt/LOGINFRM CON.ASP' file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.