CVE-2025-40986: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the endpoint 'cookies/indes.php/ '. This vulnerability can be exploited to steal confidential user data...