Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-10612 EUVD-2025-35158GHSA-rxmh-33j7-88ph

XSS in GiSoft's City Guide

Published Oct 21, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.

This issue affects City Guide: before 1.4.45.

Affected products

VendorProductAffectedFixed
giSoft Information Technologies City Guide < 1.4.45 1.4.45

References