Description
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Karaz | Karazal | ≤ 2025-04-14 | — |
High · 7.2
CVE-2025-46657
EUVD-2025-12437GHSA-w68x-249j-j9xg
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
Published Apr 27, 2025 · Updated Apr 28, 2025 · Assigned by mitre