CVE-2025-6397CWE-79

XSS in Ankara Hosting's web site

High · published February 3, 2026

CVSS v3.1
8.6
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

⚡ A single unfiltered input can unleash malicious scripts in your web apps! This reflected XSS vulnerability in Ankara Hosting's website software makes it alarmingly easy for attackers to strike when you least expect it. 🔥 Think of it like a restaurant that doesn't check orders before serving — a sneaky chef could slip a dangerous ingredient into your meal without anyone noticing. In the digital world, this vulnerability lets attackers serve up their own scripts right into your users' browsers! If left unaddressed, attackers could craft malicious links that exploit this flaw, allowing them to steal cookies, hijack sessions, or redirect users to harmful sites. The potential for data theft, user impersonation, and spreading malware is absolutely devastating!

Put simply

Think of it like a restaurant that doesn't check orders before serving — a sneaky chef could slip a dangerous ingredient into your meal without anyone noticing. In the digital world, this vulnerability lets attackers serve up their own scripts right into your users' browsers! This vulnerability occurs due to improper sanitization of user inputs during web page generation, allowing attackers to inject malicious scripts that execute in the context of users' browsers.

What to do

If left unaddressed, attackers could craft malicious links that exploit this flaw, allowing them to steal cookies, hijack sessions, or redirect users to harmful sites. The potential for data theft, user impersonation, and spreading malware is absolutely devastating! To mitigate this risk, update your website software to the latest version before 03022026, implement strong input validation, and use content security policies to restrict script execution. Don't leave your users vulnerable! You've got this! Take these steps to lock down your site and protect your users. 🛡️

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-02-03T12:15Z
EPSS history
Timeline
  • 03 FEB 12:15Z
    XSS in Ankara Hosting's web site
    cvelistv5