CVE-2026-19727 — HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System

CVE-2026-19727

HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.

Affected (CNA)

Vendor / product	Versions
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. / Library Information and Document Automation Program	affected 0 before v22.2

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.