Reflected XSS Vulnerability in Dolusoft Omaspot Software
CVE-2025-6575

5.4MEDIUM

Key Information:

Vendor

Dolusoft

Status
Omaspot
Vendor
CVE Published:
16 September 2025

What is CVE-2025-6575?

A reflected Cross-site Scripting (XSS) vulnerability in Dolusoft's Omaspot enables attackers to inject malicious scripts into web pages. This flaw can be exploited to deliver harmful payloads to users, potentially compromising their data and security. Affected versions of Omaspot prior to September 12, 2025 are at risk, underscoring the need for immediate mitigation strategies and updates.

Affected Version(s)

Omaspot 0 < 12.09.2025

References

https://www.usom.gov.tr/bildirim/tr-25-0254
third-party-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Irfan Taner
.
CVE-2025-6575 : Reflected XSS Vulnerability in Dolusoft Omaspot Software