A vulnerability was found in Issabel 5.0.0. It has been declared as problematic. The affected element is an unknown function of the file /index.php?menu=conferencia. The manipulation of the argument numero_conferencia results in cross site scripting.
This vulnerability is known as CVE-2025-40648. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
