Skip to content
OpenAdvisories
High · 7.2 CVE-2025-0643 EUVD-2025-198284GHSA-7vf9-246v-9pp3

XSS in Narkom Communication Technologies' Pyxis Signage

Published Nov 20, 2025 · Updated Jun 6, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.

This issue affects Pyxis Signage: through 31012025.

Affected products

VendorProductAffectedFixed
Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage ≤ 31012025 —

References