Security Advisory

CVE-2025-40675

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-09 09:42:18

Last updated 2025-06-09 17:54:50

Assigner INCIBE

CVSS score 5.1

State PUBLISHED

Description

A Reflected Cross-Site Scripting (XSS) vulnerability has been found in Bagisto v2.0.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the parameter 'query' in '/search'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.

← Browse all CVEs View on cve.org ↗