CVE-2026-82969
MediumCVSS 5.4Summary
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
Risk Assessment
An attacker may store a malicious script that executes in other users' browsers, potentially leading to data theft, session hijacking, or other harmful actions.
Recommendation
Update EBA Plus Document and Workflow Management System to version 10.0.11 or later to fix the vulnerability.
Other vulnerabilities in EBA Plus Document and Workflow Management System
See all- CVE-2026-85134High
An unrestricted upload of a file with a dangerous type vulnerability exists in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System, allowing upload of a web shell to a web server. This affects versions from 6.7.141 before 10.0.11.
- CVE-2026-82915Medium
Path Traversal vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows an attacker to access files outside the restricted directory. Affects versions from 6.7.141 before 10.0.11.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS