Back to Database
Status published
Medium
CVE-2025-40679
HTML injection in Isshue from Bdtask
Vulnerability Description
HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/category_product_search', affecting the 'product_name' parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40679
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Gonzalo Aguilar García (6h4ack)
More from Bdtask
View All →CVE-2025-13239
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow
Medium
5.3
CVE-2025-13238
Bdtask Flight Booking Software Edit Profile edit unrestricted upload
Medium
5.3
CVE-2025-13186
Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution manage_customer cross site scripting
Medium
4.8
CVE-2025-13185
Bdtask/CodeCanyon News365 profile unrestricted upload
Medium
5.1
CVE-2025-13180
Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System edit_profile cross site scripting
Medium
5.1
Affected Vendor
Bdtask
View all reports →Affected Software
Isshue
Vulnerable Versions:
all versions
Timeline
Official Publish:
January 20th, 2026
Last Modified:
January 20th, 2026
Added to House:
July 22nd, 2026