VYPR
← All advisories
Low severity2.4NVD Advisory· Published May 26, 2025· Updated Jun 17, 2026

CVE-2025-5179

CVE-2025-5179

Description

A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by this vulnerability is an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page. The manipulation of the argument Name/Usuário leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

3
  • Realce Tecnologia/Queue Ticket Kiosk3 versions
    cpe:2.3:a:realcetecnologia:queue_ticket_kiosk:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:realcetecnologia:queue_ticket_kiosk:*:*:*:*:*:*:*:*range: <=2025-05-17
    • (no CPE)range: <=20250517
    • (no CPE)range: 20250517

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.