This vulnerability (CVE-2025-14347) affects Proliz Software Ltd.'s OBS (Student Affairs Information System)0 prior to version 26.5009. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to reflected Cross-site Scripting (XSS). The flaw allows an attacker with low privileges and requiring user interaction to inject malicious scripts that could compromise confidentiality by exposing sensitive information. The attack vector is network-based with low attack complexity and no impact on availability. Integrity impact is low. No patch or official fix has been documented in the provided data.

Successful exploitation can lead to disclosure of sensitive information due to reflected XSS, potentially compromising user confidentiality. The vulnerability does not impact system availability and has a low integrity impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts. Monitor vendor channels for updates regarding patches or official mitigations.