VULNERABILITY INTELLIGENCE
CVE-2025-40679
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-01-20
Last modified2026-06-17
Description
HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.
Weakness classification
- cve-coordination@incibe.es: CWE-79