CVE-2025-40647

The CVE-2025-40647 entry concerns Issabel v5.0.0 with a stored XSS vulnerability in the web UI, caused by insufficient validation of user input in the email parameter of /index.php?menu=address_book. Public references describe a stored XSS that can be triggered via this parameter, with CVSS v4.0 ...