CVE-2025-31626

Summary

CVE-2025-31626 is a Cross-site Scripting (XSS) vulnerability affecting the M. Ali Saleem Support Helpdesk Ticket System Lite. The defect lies in the improper neutralization of user input during web page generation. An attacker can exploit this issue by injecting malicious scripts into the affected system. Successful attacks could lead to information disclosure or unauthorized actions on behalf of the victim. The vulnerability impacts all versions of Support Helpdesk Ticket System Lite from n/a through 4.5.2. Immediate remediation is recommended to prevent potential security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.