Cross-Site Scripting Vulnerability in Zirve Nova by Zirve Information Technologies
CVE-2025-0419
4.7MEDIUM
Key Information:
- Status
- Vendor
- CVE Published:
- 17 September 2025
What is CVE-2025-0419?
A Cross-Site Scripting (XSS) vulnerability has been identified in Zirve Nova, a product by Zirve Information Technologies. This issue arises from improper sanitization of user input during web page generation, potentially allowing an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability affects versions 235 up to and including 20250131, which may result in unauthorized access to sensitive data or execution of harmful actions on behalf of unsuspecting users.
Affected Version(s)
Zirve Nova 235 <= 20250131