Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-11963 EUVD-2025-198159GHSA-7fqg-j758-j8qh

Reflected XSS in Saysis's StarCities

Published Nov 19, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS.

This issue affects StarCities: before 1.1.61.

Affected products

VendorProductAffectedFixed
Saysis Computer Systems Trade Ltd. Co. StarCities < 1.1.61 1.1.61

References