CVE-2025-40986 Reflected Cross-Site Scripting in PideTuCita

Reflected Cross-Site Scripting XSS vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the endpoint 'cookies/indes.php/'. This vulnerability can be exploited to steal confidential user data,...

CVE-2025-40986 Reflected Cross-Site Scripting in PideTuCita

Reflected Cross-Site Scripting XSS vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the endpoint 'cookies/indes.php/'. This vulnerability can be exploited to steal confidential user data,...

CVE-2025-40986

CVE-2025-40986 is a reflected XSS vulnerability in PideTuCita. The flaw enables an attacker to inject JavaScript via a crafted URL targeting the endpoint cookies/indes.php/, potentially allowing theft of session data or unintended actions on behalf of the user. The CVSS metrics indicate Network a...