This vulnerability (CVE-2025-0547) affects Paraşüt Software Bizmu versions 2.27.0 through 20250212 and is classified as CWE-79, indicating improper neutralization of input during web page generation leading to Cross-Site Scripting (XSS). The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) shows that the attack requires network access and high privileges, no user interaction, and can impact confidentiality, integrity, and availability to a limited extent. The vulnerability allows an attacker with elevated privileges to inject malicious scripts into web pages generated by the application. No patch or official remediation information is provided in the available data.

Successful exploitation could allow an attacker with high privileges to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. However, the requirement for high privileges reduces the risk of remote exploitation by low-privileged users. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to high-privilege accounts and monitor for suspicious activity related to script injection. Avoid exposing the affected versions publicly if possible.