CVE-2025-59765

AndSoft e-TMS v25.03 is affected by a reflected Cross-Site Scripting (XSS) vulnerability. The issue arises in the login endpoint (/clt/LOGINFRM_LF.ASP) where user-controlled data in the l, demo, demo2, TNTLOGIN, UO, and SuppConn parameters can be exploited to cause JavaScript execution in a victi...