Cross-Site Scripting Vulnerability in GoldenHorn by TAC Information Services
CVE-2025-13127

3.5LOW

Key Information:

Vendor

Tac Information Services Internal And External Trade Inc.

Status
Goldenhorn
Vendor
CVE Published:
10 December 2025

What is CVE-2025-13127?

TAC Information Services has identified a Cross-Site Scripting (XSS) vulnerability in their GoldenHorn product. This vulnerability arises from improper handling of input during web page generation, allowing malicious users to inject arbitrary scripts. When users interact with compromised pages, they may unintentionally execute these scripts, leading to potential data theft, session hijacking, and other attacks. It is crucial for users of GoldenHorn versions prior to 4.25.1121.1 to implement the necessary updates to mitigate this risk.

Affected Version(s)

GoldenHorn 0 < 4.25.1121.1

References

https://www.usom.gov.tr/bildirim/tr-25-0441

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Samet YILMAZ
JSON
.
CVE-2025-13127 : Cross-Site Scripting Vulnerability in GoldenHorn by TAC Information Services