XSS Vulnerability in KVKNET by Aryom Software High Technology Systems Inc.
CVE-2025-11960

6.1MEDIUM

Key Information:

Vendor: Aryom Software High Technology Systems Inc.
Status: Kvknet
Vendor: CVE Published:; 11 November 2025

🔔 Create Aryom Software High Technology Systems Inc. Vulnerability Alert

What is CVE-2025-11960?

A reflected Cross-site Scripting (XSS) vulnerability has been identified in KVKNET, a product by Aryom Software High Technology Systems Inc. This vulnerability arises from improper handling of user input during web page generation, potentially allowing attackers to inject malicious scripts that are executed in the user's browser. Users of KVKNET versions prior to 2.1.8 are advised to upgrade to mitigate the risk associated with this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

KVKNET 0 < 2.1.8

References

https://www.usom.gov.tr/bildirim/tr-25-0386

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Nov 11, 2025
Vulnerability Reserved
Oct 20, 2025

Credit

Engin AYDOĞAN

JSON

Aryom Software High Technology Systems Inc.