Medium severity6.1NVD Advisory· Published Nov 26, 2025· Updated Jun 17, 2026
CVE-2025-65237
CVE-2025-65237
Description
A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Release: 5+ 2 more
- (no CPE)range: Release: 5
- (no CPE)
- cpe:2.3:a:opencode:ussd_gateway:6.13.11:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65237-ussd-gateway-reflected-cross-site-scriptingnvdExploitThird Party Advisory
- eslam3kl.gitbook.ionvdNot Applicable
News mentions
0No linked articles in our index yet.