Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-0419 EUVD-2025-29701GHSA-39gf-78j2-vwxh

XSS in Mikrogrup's Zirve Nova

Published Sep 17, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).

This issue affects Zirve Nova: from 235 through 20250131.

Affected products

VendorProductAffectedFixed
Zirve Information Technologies Zirve Nova 235 – ≤ 20250131 —

References