CVE-2025-40980 | UltimateFosters UltimatePOS 6.4; Query /products//edit Name cross site scripting

A vulnerability, which was classified as problematic, was found in UltimateFosters UltimatePOS 6.4;. This affects an unknown part of the file /products//edit of the component Query Handler. The manipulation of the argument Name leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-40980. It is possible to initiate the attack remotely. There is no exploit available.