CVE-2025-40719
EUVD-2025-2045808.07.2025, 12:15
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| quiter | quiter_gateway | 𝑥 < 4.7.0 |
𝑥
= Vulnerable software versions