Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-11960 EUVD-2025-84358GHSA-xfmq-wx8v-7h39

Reflected XSS in Aryom's KVKNET

Published Nov 11, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Software High Technology Systems Inc. KVKNET allows Reflected XSS.

This issue affects KVKNET: before 2.1.8.

Affected products

VendorProductAffectedFixed
Aryom Software High Technology Systems KVKNET < 2.1.8 2.1.8

References