CVE-2025-59772
02.10.2025, 15:15
Cross-site scripting (XSS) vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL.The relationship between parameter and assigned identifier is'l, demo, demo2, TNTLOGIN, UO and SuppConn' parameters in'/clt/LOGINFRM_SIL.ASP'.
| Vendor | Product | Version |
|---|---|---|
| andsoft | e-tms | 25.03 |
𝑥
= Vulnerable software versions