Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-14347 EUVD-2025-203885GHSA-9wxc-2rhv-gcm6

Reflected XSS in Proliz's OBS

Published Dec 17, 2025 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. OBS (Student Affairs Information System)0 allows Reflected XSS.

This issue affects OBS (Student Affairs Information System)0: before 26.5009.

Affected products

VendorProductAffectedFixed
Proliz Software OBS (Student Affairs Information System)0 < 26.5009 26.5009

References