| ID | CVE-2025-10914 | 
      
          | Sažetak | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Reflected XSS.This issue affects OBS (Student Affairs Information System): before V26.0401. | 
      
          | Reference |  | 
      
        | CVSS | 
              | Base: | 7.6 |  | Impact: | 4.7 |  | Exploitability: | 2.8 |  | 
    
        | Pristup | 
            | Vektor | Složenost | Autentikacija |  
            | NETWORK | LOW | NONE |  | 
      
        | Impact | 
            | Povjerljivost | Cjelovitost | Dostupnost |  
            | HIGH | LOW | LOW |  | 
    
        | CVSS vektor | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L | 
      
          | Zadnje važnije ažuriranje | 27-10-2025 - 13:20 | 
      
          | Objavljeno | 23-10-2025 - 09:15 |