CVE-2026-5793

MediumCVSS 6.1

Published: 09/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

A reflected XSS (Cross-Site Scripting) vulnerability has been discovered in BiEticaret by Inrove Software and Internet Services, due to improper input neutralization during page generation. The issue affects versions prior to v3.3.57.

Risk Assessment

An attacker can inject malicious scripts into server responses, potentially leading to session hijacking, redirection to malicious sites, or data theft.

Recommendation

Immediately upgrade BiEticaret to version v3.3.57 or later, which includes a fix for this vulnerability.

Other vulnerabilities in BiEticaret

CVE-2026-5955Critical
An SQL injection vulnerability was found in BiEticaret by Inrove Software and Internet Services due to improper neutralization of special elements in SQL commands. This allows an attacker to execute arbitrary SQL queries on the database.

Original NVD description (English source)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57.