What is the CVSS score of CVE-2025-8456?

CVE-2025-8456 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-8456?

Within 24 hours: Identify all systems running Kod8 software and document affected user populations; notify Kod8 for patch status and ETA. Within 7 days: Implement Web Application Firewall (WAF) rules to detect and block XSS payloads; restrict administrative access and implement strict input validation on affected web forms. Within 30 days: Establish daily communication with vendor for patch availability; conduct user awareness training on phishing/suspicious links; prepare for rapid deployment once patch is released.

CVE-2025-8456

HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-02-03 iletisim@usom.gov.tr

XSS

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 03, 2026 - 09:16 nvd

HIGH 7.6

DescriptionCVE.org

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website allows Reflected XSS.This issue affects Kod8 Individual and SME Website: through 03022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website is affected by cross-site scripting (xss) (CVSS 7.6).

Technical ContextAI

This vulnerability (CWE-79: Cross-site Scripting (XSS)) affects Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website allows Reflected XSS.This issue affects Kod8 Individual and SME Website: through 03022026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected ProductsAI

Product: Kod8 Software Technologies Trade Ltd. Co. Kod8 Individual and SME Website.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.