CVE-2026-19727
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.
Risk Assessment
The risk is the potential execution of malicious scripts in the user's browser, which could lead to session theft, account takeover, or other harmful actions. The attack can be used against system users.
Recommendation
It is recommended to upgrade the program to version v22.2 or later, which includes input neutralization fixes. Also, train staff on secure data input practices.
Other vulnerabilities in Library Information and Document Automation Program
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS