CVE-2025-59748
02.10.2025, 15:15
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.The relationship between parameter and assigned identifier is 'l' and 'reset' parameters in '/clt/changepassword.asp'.
| Vendor | Product | Version |
|---|---|---|
| andsoft | e-tms | 25.03 |
𝑥
= Vulnerable software versions