CVE-2025-40992 Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint…

Description

Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameter via POST. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal his/her cookie session details.

Affected products and versions