CVE-2026-77818
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Risk Assessment
The risk is the potential for content spoofing displayed to users, which could lead to phishing or misinformation. The attack can be used to deceive system users.
Recommendation
It is recommended to upgrade the program to version v22.2 or later, which includes input neutralization fixes. Also, implement input validation mechanisms.
Other vulnerabilities in Library Information and Document Automation Program
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS