CVE Catalog
CVE-2026-19447
MediumCVSS 5.4Summary
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5.
Risk Assessment
The risk includes execution of malicious scripts in the user's browser, which can lead to data theft, session hijacking, or unauthorized actions in the system.
Recommendation
It is recommended to update FileOrbis to version 16.5 or later and conduct a security audit to detect potential abuses.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fileorbis Informatics Services Trade Inc. FileOrbis allows Stored XSS. This issue affects FileOrbis: before 16.5.