Medium severity4.7NVD Advisory· Published Sep 17, 2025· Updated Jun 17, 2026

CVE-2025-0419

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).

This issue affects Zirve Nova: from 235 through 20250131.

Affected products

Zirve Information Technologies Inc./Zirve Novallm-fuzzy
Range: 235 - 20250131

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0260nvd
www.usom.gov.tr/bildirim/tr-25-0260nvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000