5.4
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform allows Reflected XSS.This issue affects Virtual Library Platform: before v202.
Basic Information
ID
CVE-2025-9035
Source
TR-CERT
Published
Sep 22, 2025 at 09:15
Affected Product
Vendor
Horato Internet Technologies Ind. and Trade Inc.
Product
Virtual Library Platform
Affected Versions
Horato Internet Technologies Ind. and Trade Inc. Virtual Library Platform 0