Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-40977

Multiple vulnerabilities in WorkDo products

Description

Stored Cross-Site Scripting (XSS) vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WorkDo eCommerceGo SaaS

Default version status: unaffected

  • All versionsaffected

References