Skip to content
OpenAdvisories
High · 8.9 CVE-2025-10467 EUVD-2025-31090GHSA-prh3-wwj9-84mr

Stored XSS in Proliz Software's OBS

Published Sep 25, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.

This issue affects OBS (Student Affairs Information System): before v25.0401.

Affected products

VendorProductAffectedFixed
PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) < v25.0401 v25.0401

References