← Database

CVE-2025-40648

N/A CVSS: N/A Published: 2025-10-01 Modified: 2026-06-17

Description

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'numero_conferencia' parameter in '/index.php?menu=conferencia'.

Affected Platforms

Unknown

Weakness Type

CWE-79

References