This vulnerability (CVE-2025-7799) involves improper neutralization of input in the Zirve Information Technologies Inc. e-Taxpayer Accounting Website, leading to reflected XSS attacks. The CVSS v3.1 score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts including low confidentiality, high integrity, and low availability. The issue affects all versions up to 07082025. No patch or vendor advisory is available to confirm remediation status.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected website, potentially leading to unauthorized actions or data manipulation (high integrity impact) and limited confidentiality loss. Availability impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with the affected website. No vendor advisory or patch links are currently provided.