CVE-2025-0546: XSS in Mevzuattr Software's MevzuatTR

Severity: medium (CVSS 4.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-17 · updated 2026-09-26
Weakness: CWE-79

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr Software MevzuatTR allows Phishing, iFrame Overlay, Clickjacking, Forceful Browsing. This issue needs high privileges. This issue affects MevzuatTR: before 12.02.2025.

Affected products

Mevzuattr Software MevzuatTR: before 12.02.2025 — fixed in 12.02.2025

How to fix

Upgrade to a fixed version: Mevzuattr Software MevzuatTR 12.02.2025. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0269
https://www.usom.gov.tr/bildirim/tr-25-0269

Get alerted when CVE-2025-0546 or the next vulnerability affects your stack