A vulnerability categorized as problematic has been discovered in Status Tracker Energy CRM 2025. This affects an unknown function of the file /crm/create_invoice_submit.php of the component Query Handler. Executing manipulation of the argument customerName_0 can lead to cross site scripting.
The identification of this vulnerability is CVE-2025-40640. The attack may be launched remotely. There is no exploit available.
