CVE-2025-10913CWE-79

XSS in saastech.io's TemizlikYolda

High · published February 11, 2026

CVSS v3.1
8.3
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

⚡ Watch out! A sneaky XSS vulnerability in TemizlikYolda lets attackers inject malicious scripts into web pages, putting user security at risk! 🔥 Think of it like a restaurant where anyone can write their own menu item on the chalkboard without checks — customers might get something strange or even harmful to eat! If an attacker successfully exploits this flaw, they could run any JavaScript code on the pages viewed by users. This could lead to data theft, session hijacking, or even malicious redirects, making it a real nightmare for user security and trust!

Put simply

Think of it like a restaurant where anyone can write their own menu item on the chalkboard without checks — customers might get something strange or even harmful to eat! This vulnerability stems from improper handling of user input during web page generation, allowing attackers to inject and execute malicious JavaScript when users interact with affected pages.

What to do

If an attacker successfully exploits this flaw, they could run any JavaScript code on the pages viewed by users. This could lead to data theft, session hijacking, or even malicious redirects, making it a real nightmare for user security and trust! To safeguard your application, update TemizlikYolda to the latest version immediately, ensuring proper input validation and output encoding on all user-generated content. Regularly audit your code for XSS vulnerabilities and implement a Content Security Policy (CSP) for an extra layer of defense! You’ve got this! Strengthen your defenses now and keep your users safe! 🛡️

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00301 · 21.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-11T08:01Z
EPSS history
Timeline
  • 11 FEB 08:01Z
    XSS in saastech.io's TemizlikYolda
    cvelistv5