Cross-Site Scripting Vulnerability in Horato Internet Technologies Virtual Library Platform

CVE-2025-9035

What is CVE-2025-9035?

A Cross-Site Scripting (XSS) vulnerability in the Virtual Library Platform by Horato Internet Technologies Ind. and Trade Inc. permits attackers to inject malicious scripts into web pages viewed by users. This flaw affects versions prior to v202, leading to potential exploitation where crafted URLs could result in unvalidated user input being executed in the browser. Consequently, this may allow an attacker to steal session cookies, redirect users to malicious sites, and perform unauthorized actions on behalf of the user.

References