CVE-2025-0546

4.7 mediumEPSS 0.3%

Medium (4.7). EPSS 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr Software MevzuatTR allows Phishing, iFrame Overlay, Clickjacking, Forceful Browsing. This issue needs high privileges. This issue affects MevzuatTR: before 12.02.2025.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-1021
Published: 2025-09-17
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0269
https://www.usom.gov.tr/bildirim/tr-25-0269

Check your stack JSON