Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-40729

Reflected Cross-Site Scripting (XSS) vulnerability in Customer Support System

Description

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Customer Support System Customer Support System

Default version status: unaffected

  • all versionsaffected

References