CVE-2025-13183

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hotech Software Inc. Otello allows Stored XSS. This issue affects Otello: from 2.4.0 before 2.4.4.

Score

CVSS 3.1 7.3 High

Status

Deferred - iletisim@usom.gov.tr

Published

2025-12-23

Last modified

2026-10-19

Weaknesses

CWE-79

Affected products

• Otello (Hotech Software Inc.)

References

• https://www.usom.gov.tr/bildirim/tr-25-0476
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0476