Cross-Site Scripting Vulnerability in Proliz Student Affairs Information System

CVE-2025-10467

What is CVE-2025-10467?

An improper handling of user input during web page generation in Proliz's OBS (Student Affairs Information System) prior to version 25.0401 leads to vulnerabilities that enable stored cross-site scripting (XSS) attacks. Attackers can exploit this vulnerability to inject malicious scripts that may be executed in the browsers of users who access compromised pages, potentially leading to unauthorized data access and other security risks.

References