CVE-2025-41026: Gdtaller

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller. These vulnerabilities allows an attacker execute JavaScript code in the victim's browser by sending a malicious URL in 'site' parameter in 'app_login.php'.

Affected products

• Gdtaller Gdtaller: affected versions not specified

Published 2026-03-26. Last modified 2026-06-17.