CVE-2025-13178: Bdtask/CodeCanyon SalesERP User Profile edit_profile cross site scripting
A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file /editprofile of the component User Profile Handler. This manipulation of the argument firstname/lastname causes basic cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13178?
The severity of CVE-2025-13178 is classified as a medium risk due to the potential for cross-site scripting attacks.
How do I fix CVE-2025-13178?
To fix CVE-2025-13178, ensure that user inputs are properly sanitized and validated in the User Profile Handler component.
Which versions of Bdtask SalesERP are affected by CVE-2025-13178?
CVE-2025-13178 affects Bdtask SalesERP versions up to and including 20250728.
What type of vulnerability is CVE-2025-13178?
CVE-2025-13178 is a cross-site scripting (XSS) vulnerability that exploits user input manipulation.
Where can I find more information about CVE-2025-13178?
Additional information about CVE-2025-13178 can typically be found in security advisories or databases maintained by security organizations.