Skip to content
OpenAdvisories
Critical · 9.4 CVE-2025-8668 EUVD-2025-207457GHSA-92hq-qvrx-74gm

Reflected XSS in E-Kalite Software Hardware Engineering's Turboard

Published Feb 11, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard allows Reflected XSS.

This issue affects Turboard: from 2025.07 before 2026.02. 
NOTE: This CVE record updated after the vendor implemented mitigations.

Affected products

VendorProductAffectedFixed
E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd. Co. Turboard 2025.07 – < 2026.02 2026.02

References