CVE-2026-89290 — HTML Injection in İzometri Informatics' eimzamip

CVE-2026-89290

HTML Injection in İzometri Informatics' eimzamip PUBLISHED

Description (CNA)

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.

Affected (CNA)

Vendor / product	Versions
İzometri IT Services Domestic and Foreign Trade Co. Ltd. / eimzamip	affected v1.6.4 before v1.6.7

CWE

CWE-80

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.