CVE-2025-59752

AndSoft e-TMS v25.03 is affected by a reflected XSS vulnerability. The issue arises from lack of proper filtering/escaping of user-supplied data in parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in /clt/LOGINFRM_LXA.ASP, allowing an attacker to execute JavaScript in a victim’s browser via ...