Isshue CVE-2025-40679

Cross-site Scripting (XSS) (CWE-79)

2026-01-20 cve-coordination@incibe.es

XSS

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 20, 2026 - 12:15 nvd

N/A

DescriptionCVE.org

HTML

Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.

Analysis

HTML

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). HTML

Affected ProductsAI

HTML

Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POS

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers.

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2013-7389 MEDIUM POC

4.3

CVE-2021-25299 MEDIUM POC

6.1

CVE-2014-2120 MEDIUM

6.1

CVE-2023-40000 HIGH POC

8.3

CVE-2016-8581 MEDIUM POC

6.1

CVE-2013-5223 MEDIUM POC

5.4

CVE-2025-52367 MEDIUM POC

5.4

CVE-2015-0072 MEDIUM POC

4.3

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

9.8

CVE-2013-1710 CRITICAL POC

10.0

CVE-2013-7389 MEDIUM POC

4.3

CVE-2021-25299 MEDIUM POC

6.1

CVE-2014-2120 MEDIUM

6.1

CVE-2023-40000 HIGH POC

8.3

CVE-2024-52875 HIGH POC

8.8

CVE-2016-8581 MEDIUM POC

6.1

CVE-2025-40679 vulnerability details – vuln.today

Back

Isshue CVE-2025-40679

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

Affected ProductsAI

RemediationAI

Same weakness CWE-79 – Cross-site Scripting (XSS)

Same technique XSS

Share

External POC / Exploit Code