PT-2025-47457 · Saysis Computer Systems Trade · Starcities

İbrahim Yi̇ği̇tsoy · Published 2025-11-19 · Updated 2026-06-04 · CVE-2025-11963

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions StarCities versions prior to 1.1.61

Description StarCities is subject to Reflected Cross-site Scripting (XSS), a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the victim's browser.

Recommendations Update to version 1.1.61.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-11963

Affected Products

Starcities

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-11963 · Security Note
• https://t.me/cveNotify/165937 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0403 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0403 · Note