Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_recuperarclave.php'.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-41027 Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending … https://www.cve.org/CVERecord?id=CVE-2025-41027
Post summary
The text announces a new Reflected XSS vulnerability in GDTaller, providing basic technical details but no PoC, exploit code, or patch information.
⚠️#INCIBEaviso | Múltiples vulnerabilidades en #GDTaller #CVE CVE-2025-41026 y CVE-2025-41027 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-gdtaller #AvisosDeSeguridad #TI #CNA
Post summary
Incibe CERT issued an alert announcing two new CVEs (CVE-2025-41026 and CVE-2025-41027) affecting GDTaller, but the post does not provide PoC, exploit details, patches, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gdtaller | gdtaller | - | - | - |