CVE-2025-40679: HTML injection in Isshue from Bdtask

Published Jan 20, 2026

Updated

HTML

Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/categoryproductsearch', affecting the 'productname' parameter.

Affected Software

1 affected component

BDTASK Isshue

Event History

Jan 20, 2026

CVE Published

via MITRE·11:53 AM

Data Sourced

via MITRE·11:53 AM

DescriptionWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-40679?

CVE-2025-40679 is classified as a high severity vulnerability due to its potential to allow HTML injection.

How do I fix CVE-2025-40679?

To fix CVE-2025-40679, implement proper validation and sanitization of user inputs specifically for the 'product_name' parameter.

What software is affected by CVE-2025-40679?

CVE-2025-40679 affects the Isshue software from Bdtask.

What kind of attack can CVE-2025-40679 facilitate?

CVE-2025-40679 can facilitate HTML injection attacks, allowing attackers to manipulate web content.

How can I determine if my installation is vulnerable to CVE-2025-40679?

You can determine if your installation is vulnerable to CVE-2025-40679 by checking the handling of user input in the POST request to '/category_product_search'.