CVE-2025-46657 | Karaz Karazal up to 2025-04-14 Default URI lang cross site scripting

A vulnerability has been found in Karaz Karazal up to 2025-04-14 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Default URI Handler. The manipulation of the argument lang leads to cross site scripting.

This vulnerability is known as CVE-2025-46657. The attack can be launched remotely. There is no exploit available.