A vulnerability was found in Quiter Gateway up to 4.6.x. It has been classified as problematic. This affects an unknown part of the file /FacturaE/VerFacturaPDF. The manipulation of the argument id_concesion leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2025-40719. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.