CVE-2025-26731

Name of the Vulnerable Software and Affected Versions Repute Infosystems ARPrice versions n/a through 4.1.3

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks.

Recommendations For versions n/a through 4.1.3, update to a version later than 4.1.3 to resolve the issue. As a temporary workaround, consider restricting user input to prevent malicious scripts from being stored and executed. Avoid using the vulnerable version of ARPrice until a patch is available.