CVE-2025-40992

Vulnerability Description

Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameter via POST. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her cookie session details.

Related Weaknesses (CWE)

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-crea

FAQ

What is CVE-2025-40992?

CVE-2025-40992 is a documented vulnerability. Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameter via POST. This vuln...

How severe is CVE-2025-40992?

CVSS scoring is not yet available for CVE-2025-40992. Check NVD for updates.

Is there a patch for CVE-2025-40992?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.