CVE-2025-0547

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting XSS. This issue affects Bizmu: from 2.27.0 through 20250212...

CVE-2025-0547 XSS in Mikrogrup's Bizmu

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting XSS. This issue affects Bizmu: from 2.27.0 through 20250212...

PT-2025-38315

Name of the Vulnerable Software and Affected Versions Logo Software Retail Sales Management versions through 20250918 Logo Software Diva versions through 4.56.00.00 Description A SQL injection issue exists in Logo Software Retail Sales Management and Diva due to improper neutralization of special...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0879 XSS in Shopside Software's Shopside App

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting XSS. This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204...

CVE-2025-0420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting XSS. This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204...

CVE-2025-0420 XSS in Mikrogrup's Paraşüt

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting XSS. This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204...

CVE-2025-0419 XSS in Mikrogrup's Zirve Nova

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

Shopside App 跨站脚本漏洞

Shopside App is a shopping application from the Turkish company Shopside. A cross-site scripting vulnerability exists in Shopside App versions prior to 17.02.2025, which stems from improper input neutralization during web page generation and could lead to cross-site scripting attacks...

PT-2025-38142

Name of the Vulnerable Software and Affected Versions: MevzuatTR versions prior to 12.02.2025 Description: The software contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' and Improper Restriction of Rendered UI Layers or Frames issue. This allows for...

MevzuatTR 安全漏洞

MevzuatTR is an online platform for retrieval and notification of judicial decisions in Turkey by MevzuatTR Turkey. A security vulnerability exists in MevzuatTR versions prior to 12.02.2025 that stems from improper input neutralization and improper UI layer or frame restriction, which could lead ...

PT-2025-38132

Name of the Vulnerable Software and Affected Versions: Paraşüt versions 0.0.0.65efa44e through 20250204 Description: Paraşüt software contains a flaw due to improper neutralization of input during web page generation, which allows for Cross-Site Scripting XSS. XSS occurs when an application...

PT-2025-38146

Name of the Vulnerable Software and Affected Versions: Shopside App versions prior to 17.02.2025 Description: Shopside App is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This issue requires high privileges. Recommendations:...

Dokuzsoft E-Commerce Web Design Product 跨站脚本漏洞

Dokuzsoft E-Commerce Web Design Product is an e-commerce platform website design software from Dokuzsoft Turkey. A cross-site scripting vulnerability exists in Dokuzsoft E-Commerce Web Design Product versions prior to 11.08.2025, which stems from improper input neutralization and could lead to...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-6575 XSS in Dolusoft's Omaspot

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS. This issue affects Omaspot: before 12.09.2025...

CVE-2025-6575 XSS in Dolusoft's Omaspot

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS. This issue affects Omaspot: before 12.09.2025...

CVE-2025-6575

CVE-2025-6575 is a reflected XSS in Dolusoft Omaspot caused by improper input neutralization during web page generation. Affected versions are prior to 12.09.2025. Attack vector is network with user interaction required for exploitation; impact is partial confidentiality and integrity concerns as...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...