CVE Intelligence

Issabel, issabel-agenda module vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Issabel, issabel-agenda module products: 2 record(s), with severity, exploitation and fixes.

Issabel 2

Exploited only (KEV) →

CVE-2025-40648 Medium · 4.8 CWE-79 Oct 1, 2025
Stored Cross-Site Scripting (XSS) vulnerability in Issabel products
Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'numero_conferencia' parameter in '/index.php?menu=conferencia'.
CVE-2025-40647 Medium · 5.1 CWE-79 Oct 1, 2025
Stored Cross-Site Scripting (XSS) vulnerability in Issabel products
Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=address_book'.