CVE-2025-2404

CVE-2025-2404 : XSS in Ubit Information Technologies’ STOYS student information system. Affected versions: STOYS 2 through 20250916. Root cause: improper neutralization of input during web page generation. Impact: potential cross-site scripting exposure; no exploitation details or in-the-wild dat...

Ubit STOYS 跨站脚本漏洞

Ubit STOYS is a student information system from Ubit Turkey. A cross-site scripting vulnerability exists in Ubit STOYS versions 2 through 20250916, which stems from improper input neutralization during web page generation and could lead to cross-site scripting attacks...