Question 1

What is CVE-2025-40647 — CVE-2025-40647?

Accepted Answer

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=address_book'.

Question 2

What is the authoritative source for CVE-2025-40647?

Accepted Answer

CVE-2025-40647 (CVE-2025-40647) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2025-40647CVE-2025-40647

Description

Scoring