XSS Vulnerability in KVKNET by Aryom Software High Technology Systems Inc.
CVE-2025-11960

6.1MEDIUM

Key Information:

Vendor

Aryom Software High Technology Systems Inc.

Status
Kvknet
Vendor
CVE Published:
11 November 2025

What is CVE-2025-11960?

A reflected Cross-site Scripting (XSS) vulnerability has been identified in KVKNET, a product by Aryom Software High Technology Systems Inc. This vulnerability arises from improper handling of user input during web page generation, potentially allowing attackers to inject malicious scripts that are executed in the user's browser. Users of KVKNET versions prior to 2.1.8 are advised to upgrade to mitigate the risk associated with this issue.

Affected Version(s)

KVKNET 0 < 2.1.8

References

https://www.usom.gov.tr/bildirim/tr-25-0386

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Engin AYDOÄžAN
JSON
.
CVE-2025-11960 : XSS Vulnerability in KVKNET by Aryom Software High Technology Systems Inc.