CVE-2025-40729 — Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support System

CVE-2025-40729

Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support System PUBLISHED

Description (CNA)

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.

Affected (CNA)

Vendor / product	Versions
Customer Support System / Customer Support System	affected all versions

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-customer-support-system

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.