CNNVD-202506-1865 Information

CNNVD ID

CNNVD-202506-1865

CVE-2025-40729

  • CNNVD Published: 2025-06-16

Description (Chinese)

Customer Support System是oretnom23个人开发者的一个客户支持系统,可以帮助某个企业或公司在客户从他们那里购买产品后提供客户支持。 Customer Support System v1.0版本存在跨站脚本漏洞,该漏洞源于反射型跨站脚本,可能导致执行任意代码。

Description (English)

Customer Support System is a customer support system for the oretnom 23 individual developers that can help an enterprise or company to provide customer support after customers have purchased products from them. There is a cross-site script loophole in the Customer Support System v. 1.0, which originates from a reflector-type cross-site script and may result in the implementation of any code.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2025-06-16

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-customer-support-system

Share on: