QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-40641

Back to search

CVE-2025-40641

Published: Sep 8, 2025

Modified: Sep 8, 2025

PUBLISHED

Description

Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the product_name parameter in /Controller_Products/update. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.

VendorProductVersions

Multi-Purpose Inventory Management System

Multi-Purpose Inventory Management System

affected
Non-defining

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now