CVE-2026-77818 — Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System

CVE-2026-77818

Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.

Affected (CNA)

Vendor / product	Versions
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. / Library Information and Document Automation Program	affected v22.1 before v22.2

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1011

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.