Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Karaz records in CISA KEVNo Karaz vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 65
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00331 · Published 2025-04-27 · No fix listed CWE-79
Open these records in search →