MEDIUM
Edubusinesssolutions
CVE published 2026-01-08
CVE-2025-61549
A Cross-Site Scripting (XSS) vulnerability exists in edu Business Solutions Print Shop Pro WebDesk version 18.34. The vulnerability is located in the LoginID parameter of the /PSP/app/web/reg/reg_display.asp endpoint. Unsanitized user input is reflected in HTTP responses without proper HTML encoding or escaping, allowing attackers to execute arbitrary JavaScript in the context of a victim's browser sessio [truncated]