CVE-2025-46657

Description

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://github.com/nov-1337/CVE-2025-46657/blob/main/CVE-2025-46657.md
• https://github.com/nov-1337/CVE-2025-46657/blob/main/CVE-2025-46657.md