A vulnerability labeled as problematic has been found in GDTaller. Affected is an unknown function of the file app_login.php of the component URL Handler. Such manipulation of the argument site leads to cross site scripting. This vulnerability is traded as CVE-2025-41026. The attack may be launched remotely.
| Vendor | Product | Versions |
|---|---|---|
| GDTaller | GDTaller | 0, GHSA-g3hg-j4jv-cwfr, GHSA-wvvq-wgcr-9q48 |
Updated description with more technical detail, changed severity to HIGH, and added CVE-2025-41026 as a new tag.
Initial creation
