PT-2025-9195 · Zj1983 Zz · Zj1983 Zz

Caigo

·

Published

2025-03-01

·

Updated

2025-05-26

·

CVE-2025-1830

CVSS v3.1

4.8

Medium

VectorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions zj1983 zz versions up to 2024-8
Description A vulnerability was found in the Customer Information Handler component, where the manipulation of the Customer Name argument leads to cross-site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Recommendations As a temporary workaround, consider restricting the use of the Customer Name argument in the Customer Information Handler component until a patch is available. Restrict access to the Customer Information Handler component to minimize the risk of exploitation. Avoid using the Customer Name argument in the affected component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79CWE-94

Related Identifiers

CVE-2025-1830

Affected Products

Zj1983 Zz