XSS in Multi-purpose Inventory Management System
CVE-2025-40641
Cross-site Scripting (XSS) vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the product_name parameter in /Controll…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.
Affected products
- Multi-purpose Inventory Management System — versions Non-defining