CVE-2025-0643

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025.

Score

CVSS 3.1 7.2 High

Status

Deferred - iletisim@usom.gov.tr

Published

2025-11-20

Last modified

2026-10-18

Weaknesses

CWE-79

Affected products

• Pyxis Signage (Narkom Communication And Software Technologies Trade Ltd. Co.)

References

• https://www.usom.gov.tr/bildirim/tr-25-0404
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404