Medium severity6.1NVD Advisory· Published Mar 26, 2026· Updated Jun 17, 2026

CVE-2025-41026

Description

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_login.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gdtaller/Gdtaller2 versions
cpe:2.3:a:gdtaller:gdtaller:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gdtaller:gdtaller:-:*:*:*:*:*:*:*
- (no CPE)
GDTaller/GDTallerv5
Range: 0

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-gdtallernvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000