This vulnerability (CVE-2025-10914) is a reflected Cross-site Scripting (CWE-79) issue in the OBS (Student Affairs Information System) by Proliz Software Ltd. Co. It affects versions prior to V26.0401 and results from improper input neutralization during web page generation. The CVSS 3.1 base score is 7.6, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to disclosure of sensitive information (high confidentiality impact), limited modification of data (low integrity impact), and some disruption of service (low availability impact). However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor for updates from Proliz Software Ltd. Co. and apply any future patches promptly. Until then, consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts as a temporary mitigation.