Skip to content
OpenAdvisories
High · 7.6 CVE-2025-10914 EUVD-2025-35659GHSA-frcg-m7x9-4xfj

Reflected XSS in Proliz's OBS

Published Oct 23, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Reflected XSS.

This issue affects OBS (Student Affairs Information System): before V26.0401.

Affected products

VendorProductAffectedFixed
Proliz Software Ltd. Co. OBS (Student Affairs Information System) < V26.0401 V26.0401

References