How to: CVE-2025-46657 (2025-04-27)
```
Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.
```
- [nov-1337/CVE-2025-46657](https://github.com/nov-1337/CVE-2025-46657)