VULNERABILITY INTELLIGENCE

CVE-2025-40729

CVSS score6.1 MEDIUM

EPSS probability0.40%

CISA KEVNot currently listed

Published2025-06-16

Last modified2026-06-17

Description

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.