A vulnerability marked as problematic has been reported in GDTaller. Affected by this vulnerability is an unknown functionality of the file app_recuperarclave.php of the component URL Handler. Performing a manipulation of the argument site results in cross site scripting. This vulnerability is known as CVE-2025-41027.
| Vendor | Product | Versions |
|---|---|---|
| GDTaller | GDTaller | 0, GHSA-g3hg-j4jv-cwfr, GHSA-wvvq-wgcr-9q48 |
Updated description with more technical detail, changed severity to HIGH, and marked the vulnerability as actively exploited.
Initial creation
