CVE-2025-65237

Publication date

2025-11-26 00:00:00

Family

mitre

State

PUBLISHED

Description

A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a users browser via injecting a crafted payload.