CVE-2025-10914

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Reflected XSS. This issue affects OBS (Student Affairs Information System): before V26.0401.

• CWE-79

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0357
• https://www.usom.gov.tr/bildirim/tr-25-0357

Published

Oct 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10909A security flaw has been discovered in Mangati NovoSGA up to…2.4
• CVE-2025-1091A Broken Authorization schema exists where any authenticated…4.3
• CVE-2025-10910A flaw in the binding process of Govee’s cloud platform and …9.3
• CVE-2025-10911A use-after-free vulnerability was found in libxslt while pa…5.5
• CVE-2025-10912Authorization Bypass Through User-Controlled Key vulnerabili…5.4
• CVE-2025-10913Improper Neutralization of Input During Web Page Generation …8.3
• CVE-2025-10915The Dreamer Blog WordPress theme through 1.2 is vulnerable t…9.8
• CVE-2025-10916The FormGent WordPress plugin before 1.0.4 is vulnerable to…9.1
• CVE-2025-10918Insecure default permissions in the agent of Ivanti Endpoint…7.1
• CVE-2025-10920GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execu…7.8
• CVE-2025-10921GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code…7.8
• CVE-2025-10922GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code…7.8