Description (CNA)
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/configuroweb/inventariobasico
- https://configuroweb.com/sistema-web-de-inventario-simple-en-php-mysql/
- https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-60314/README.md
ADP enrichment
No English description supplied.
No references supplied.