A vulnerability, which was classified as problematic, has been found in Microcom ZeusWeb 6.1.31. The impacted element is an unknown function of the component My Account Page. This manipulation of the argument Name/Surname causes cross site scripting.

This vulnerability is handled as CVE-2025-13648. The attack can be initiated remotely. There is not any exploit available.