CVE-2025-0643 — XSS in Narkom Communication Technologies' Pyxis Signage

Back Back to CVE browser

HIGH

XSS in Narkom Communication Technologies' Pyxis Signage

Published Nov 20, 2025

7.2

HIGH

CVSS 3.1

EPSS 0.37%

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.

This issue affects Pyxis Signage: through 31012025.

Affected products

Vendor Narkom Communication and Software Technologies Trade Ltd. Co. Product Pyxis Signage Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=31012025

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Narkom Communication and Software Technologies Trade Ltd. Co.

Pyxis Signage

unaffected

Version	Status	Constraints
0	affected	<=31012025

Remediation

No remediation recorded yet.

Metrics

0.37% 0.00372

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00372

Score over time

2025–2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.37% (0.00372)	28.80th	v5 (v2026.06.15)
Jun 15, 2026	0.31% (0.00313)	22.77th	v5 (v2026.06.15)
Nov 21, 2025	0.04% (0.00044)	13.12th	v4 (v2025.03.14)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404
government-resource
https://www.usom.gov.tr/bildirim/tr-25-0404
government-resourcebroken-link

Link	Providers	Tags
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0404		government-resource
https://www.usom.gov.tr/bildirim/tr-25-0404		government-resourcebroken-link