2 matches found
CVE-2025-40977
Stored Cross-Site Scripting XSS vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters...
5.1CVSS5.4AI score0.00273EPSS
SaveExploits0References1
CVE-2025-40977: Improper Neutralization of Input During Web Page Generation
Stored Cross-Site Scripting XSS vulnerability in WorkDo's eCommerceGo SaaS, consisting of a lack of proper validation of user input by sending a POST request to ‘/store-ticket’, using the ‘subject’ and ‘description’ parameters...
5.1CVSS5.8AI score0.00273EPSS
SaveExploits0References1
20