medium6.1
CVE-2025-41026
Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.
Impact
Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_login.php'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gdtaller | Gdtaller | All versions |