Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.4

Horato Virtual Library Platform: Unfiltered User Input Exposes Website Visitors to Malware

CVE-2025-9035 · published 1 year ago
Summary

A security flaw in the Horato Virtual Library Platform allows hackers to inject malicious code into the website, potentially infecting visitors' computers with malware. This issue affects all versions of the platform prior to 202. Users should update to the latest version to protect themselves and their visitors.

Original advisory text
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform allows Reflect...
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform allows Reflected XSS.

This issue affects Virtual Library Platform: before v202.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published22 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-9035 · NVD
Track software like this
Free during beta