Unrated severityNVD Advisory· Published Mar 26, 2026· Updated Mar 26, 2026

Multiple vulnerabilities in GDTaller

CVE-2025-41027

Description

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_recuperarclave.php'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GDTaller/GDTallerv5
Range: 0

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-gdtallermitrepatch

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000