Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-41024 EUVD-2026-3459GHSA-ff2v-mx9w-cwr7

Stored Cross-Site Scripting in Poultry Farm Management System

Published Jan 20, 2026 · Updated Jan 20, 2026 · Assigned by INCIBE

Description

Stored Cross-Site Scripting (XSS) in Poultry Farm Management System v1.0 due to the lack of proper validation of user input by sending a POST request. The relationship between parameters and assigned identifiers is as follows: 

'companyaddress', 'companyemail', 'companyname', 'country', 'mobilenumber' y 'regno' parameters in '/farm/farmprofile.php'.

Affected products

VendorProductAffectedFixed
Poultry Farm Management System Poultry Farm Management System 1.0 —

References