CVE-2025-6397 PUBLISHED

XSS in Ankara Hosting's web site

Assigner: TR-CERT
Reserved: 20.06.2025 Published: 03.02.2026 Updated: 03.02.2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ankara Hosting Website Design Website Software allows Reflected XSS.This issue affects Website Software: through 03022026. 

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Score: 8.6

Product Status

Vendor Ankara Hosting Website Design
Product Website Software
Versions Default: affected
  • affected from 0 to 03022026 (incl.)

Credits

  • Aybike VURAL finder

References

Problem Types

  • CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') CWE

Impacts

  • CAPEC-591 Reflected XSS