PideTuCita vulnerabilities

🔔 Create alert RSS

Published CVEs affecting PideTuCita products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-40986 Medium · 5.1 CWE-79 Feb 23, 2026

Reflected Cross-Site Scripting in PideTuCita

Reflected Cross-Site Scripting (XSS) vulnerability in PideTuCita. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL using the endpoint 'cookies/indes.php/<XSS>'. This vulnerability can be exploited to steal confidential user data, such as session cookies or to perform actions on behalf of the user.