PT-2025-53812
CVE-2025-23550
·
Published
2025-03-18
·
Updated
2026-10-01
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Kemal YAZICI Product Puller versions through 1.5.1
Description
The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-Site Scripting (XSS). This means that malicious code can be injected into web pages viewed by users. The affected product is Kemal YAZICI Product Puller.
Recommendations
Update Kemal YAZICI Product Puller to a version later than 1.5.1.
Found an issue in the description? Have something to add? Feel free to write us 👾