CVE-2025-41026CWE-79

Multiple vulnerabilities in GDTaller

Medium · published March 26, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_login.php'.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00198 · 9.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-03-26T12:31Z
EPSS history
Timeline
  • 26 MAR 12:31Z
    Multiple vulnerabilities in GDTaller
    cvelistv5