Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-0547 EUVD-2025-30005GHSA-3fm8-pm26-f36w

XSS in Mikrogrup's Bizmu

Published Sep 18, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting (XSS).

This issue affects Bizmu: from 2.27.0 through 20250212.

Affected products

VendorProductAffectedFixed
Paraşüt Software Bizmu 2.27.0 – ≤ 20250212 —

References