CVE-2026-5738

MediumCVSS 6.1

Published: 27/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

DoXBASE by BilPark has a cross-site scripting (XSS) vulnerability due to improper input neutralization during web page generation, allowing Cross Zone Scripting. This affects DoXBASE through 27082026.

Risk Assessment

An attacker can inject malicious scripts that execute in the victim's browser, potentially leading to data theft or session hijacking.

Recommendation

Apply patches or update DoXBASE if available, and secure the application against XSS by validating and encoding input.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.