XSS in Bdtask Isshue

CVE-2025-40679

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.