CVE-2025-41027 — Multiple vulnerabilities in GDTaller

CVE-2025-41027

Multiple vulnerabilities in GDTaller PUBLISHED

Description (CNA)

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_recuperarclave.php'.

Affected (CNA)

Vendor / product	Versions
GDTaller / GDTaller	affected 0 before *

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-gdtaller

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.