CVE-2025-40679 | Bdtask Isshue POST Request /category_product_search product_name cross site scripting

January 20, 2026 Yanac

A vulnerability classified as problematic was found in Bdtask Isshue. Affected by this issue is some unknown functionality of the file /category_product_search of the component POST Request Handler. Such manipulation of the argument product_name leads to basic cross site scripting.

This vulnerability is documented as CVE-2025-40679. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More