CVE-2025-7799 - Reflected XSS in Zirve Information Technologies' e-Taxpayer Accounting Website

Back Back to CVE browser

HIGH

Reflected XSS in Zirve Information Technologies' e-Taxpayer Accounting Website

Published Feb 9, 2026

8.6

HIGH

CVSS 3.1

EPSS 0.31%

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. E-Taxpayer Accounting Website allows Reflected XSS.

This issue affects e-Taxpayer Accounting Website: through 07082025.

Affected products

Vendor Zirve Information Technologies Inc. Product e-Taxpayer Accounting Website Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=07082025

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Zirve Information Technologies Inc.

e-Taxpayer Accounting Website

unaffected

Version	Status	Constraints
0	affected	<=07082025

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-207366
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0019
government-resource
https://www.usom.gov.tr/bildirim/tr-26-0019
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-207366		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0019		government-resource
https://www.usom.gov.tr/bildirim/tr-26-0019		government-resourcebroken-link