Skip to content
OpenAdvisories
High · 8.9 CVE-2025-11956 EUVD-2025-37982GHSA-chqh-jw54-v96h

XSS in Proliz's OBS

Published Nov 6, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.

This issue affects OBS (Student Affairs Information System): before 25.0401.

Affected products

VendorProductAffectedFixed
Proliz Software Ltd. Co. OBS (Student Affairs Information System) < 25.0401 25.0401

References