Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-14320 EUVD-2025-209611GHSA-fm49-vp9p-4536

XSS in Tegsoft's Online Support Application

Published May 4, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Support Application allows Reflected XSS.

This issue affects Online Support Application: from V3 through 31122025.

Affected products

VendorProductAffectedFixed
Tegsoft Management and Information Services Trade Limited Company Online Support Application V3 – ≤ 31122025 —

References