Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-10727 EUVD-2025-35660GHSA-9h68-r4p9-cx52

Reflected XSS in ArkSigner's AcBakImzala

Published Oct 23, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows Reflected XSS.

This issue affects AcBakImzala: before v5.1.4.

Affected products

VendorProductAffectedFixed
ArkSigner Software and Hardware AcBakImzala < v5.1.4 v5.1.4

References