high7.2
CVE-2025-46657
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
Impact
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Karaz | Karazal | through 2025-04-14 |