Description
A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload.
Medium · 6.1
CVE-2025-65237
EUVD-2025-199722GHSA-367q-hhvx-9x63
A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary Ja…
Published Nov 26, 2025 · Updated Dec 3, 2025 · Assigned by mitre