1 matches found
CVE-2025-59746: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'...
6.9CVSS6.5AI score0.00251EPSS
SaveExploits0References3
20