A vulnerability was found in Issabel 5.0.0. It has been classified as problematic. Impacted is an unknown function of the file /index.php?menu=address_book. The manipulation of the argument email leads to cross site scripting.
This vulnerability is traded as CVE-2025-40647. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is recommended.
