Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-40679

HTML injection in Isshue from Bdtask

Description

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bdtask Isshue

Default version status: unaffected

  • all versionsaffected

References