CVE-2025-10467 — Stored XSS in Proliz Software's OBS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Studen…
Published: 2025-09-25 · CVSS: 8.9 · CVSS 3.1
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS. This issue affects OBS (Student Affairs Information System): before v25.0401.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7