This vulnerability (CVE-2025-14320) affects the Online Support Application by Tegsoft Management and Information Services Trade Limited Company. It is a reflected cross-site scripting (XSS) issue caused by improper input neutralization during web page generation. The flaw allows an attacker to inject malicious scripts that execute in the context of the victim's browser, potentially leading to full compromise of user data and session integrity. The affected versions include V3 through 31122025. The CVSS 3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been published yet.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the victim's browser, resulting in theft of sensitive information, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability of data. Given the critical CVSS score of 9.8, the impact is severe. However, there are currently no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation and output encoding controls where possible to mitigate reflected XSS risks. Monitor vendor communications for updates on patches or official mitigations.