CVE-2025-46657

HIGH

Karaz Karazal - Reflected XSS

Title source: llm

Description

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.

Exploits (1)

nomisec WRITEUP 1 stars
by nov-1337 · poc
https://github.com/nov-1337/CVE-2025-46657

References (1)

Scores

CVSS v3 7.2
EPSS 0.0005
EPSS Percentile 16.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
karaz/karazal < 2025-04-14
Published Apr 27, 2025
Tracked Since Feb 18, 2026