Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-13127 EUVD-2025-202424GHSA-4759-wrpr-635r

XSS in TACAS Consulting's GoldenHorn

Published Dec 10, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Information Services Internal and External Trade Inc. GoldenHorn allows Cross-Site Scripting (XSS).

This issue affects GoldenHorn: before 4.25.1121.1.

Affected products

VendorProductAffectedFixed
TAC Information Services Internal and External Trade GoldenHorn < 4.25.1121.1 4.25.1121.1

References