CVE-2025-8664

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting (XSS). This issue affects StarCities E-Municipality Management: before 20250825.

• CWE-79

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0281
• https://www.usom.gov.tr/bildirim/tr-25-0281

Published

Sep 19, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8655Kenwood DMX958XR libSystemLib Command injection Remote Code …6.8
• CVE-2025-8656Kenwood DMX958XR Protection Mechanism Failure Software Downg…6.8
• CVE-2025-8660Privilege escalation occurs when a user gets access to more …9.8
• CVE-2025-8661A stored Cross-Site Scripting vulnerability (XSS) occurs whe…6.1
• CVE-2025-8662OpenAM (OpenAM Consortium Edition) contains a vulnerability …4.3
• CVE-2025-8663Insertion of Sensitive Information into Log File vulnerabili…6.5
• CVE-2025-8665A vulnerability, which was classified as critical, has been …6.3
• CVE-2025-8666The Testimonial Carousel For Elementor plugin for WordPress …6.4
• CVE-2025-8667A vulnerability, which was classified as critical, was found…6.3
• CVE-2025-8668Improper Neutralization of Input During Web Page Generation …9.4
• CVE-2025-8669The Customify theme for WordPress is vulnerable to Cross-Sit…4.3
• CVE-2025-8671A mismatch caused by client-triggered server-sent stream res…7.5