CVE-2025-40721

creationtimestamp| type| source ---|---|--- 2025-07-08 14:00:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthhlebwrq2s...

CVE-2025-40721

Reflected Cross-site Scripting XSS vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the idfactura parameter in /FacturaE/listadofacturasficha.jsp...

CVE-2025-40721

Summary of the CVE-2025-40721 details: Quiter Gateway (versions prior to 4.7.0) is affected by a reflected XSS vulnerability. The issue arises from user-supplied input in the id_factura parameter passed to the endpoint /FacturaE/listado_facturas_ficha.jsp, allowing an attacker to inject and execu...