High severity7.3NVD Advisory· Published Dec 23, 2025· Updated Jun 4, 2026

CVE-2025-13183

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Software Inc. Otello allows Stored XSS.

This issue affects Otello: from 2.4.0 before 2.4.4.

Affected products

Hotech Software Inc./Otellollm-fuzzy
Range: >=2.4.0 <2.4.4

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0476nvd
www.usom.gov.tr/bildirim/tr-25-0476nvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000