CVE-2025-40976 | WorkDo TicketGo POST Request /ticketgo-saas/home Description cross site scripting

January 12, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in WorkDo TicketGo. The affected element is an unknown function of the file /ticketgo-saas/home of the component POST Request Handler. Performing a manipulation of the argument Description results in cross site scripting.

This vulnerability is reported as CVE-2025-40976. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More