CVE-2026-8310
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A reflected cross-site scripting (XSS) vulnerability has been found in Webbeyaz Web Design Mediküm Web due to improper input neutralization during page generation. The issue affects versions up to 08072026, and the vendor has discontinued support for the product.
Risk Assessment
An attacker can exploit this flaw to inject malicious scripts into server responses, potentially leading to session hijacking, redirection to malicious sites, or theft of sensitive data. The lack of vendor support increases risk as no official patches will be released.
Recommendation
Immediately stop using Mediküm Web and replace it with a supported solution. If replacement is not possible, implement temporary mitigations such as input filtering and Content-Security-Policy headers.
Other vulnerabilities in Mediküm Web
See all- CVE-2026-8307Critical
A SQL injection vulnerability was found in Webbeyaz Web Design Mediküm Web due to improper neutralization of special elements in SQL commands. This allows an attacker to execute arbitrary SQL queries on the database.
- CVE-2026-8315Medium
A stored cross-site scripting (XSS) vulnerability has been found in Webbeyaz Web Design Mediküm Web due to improper input neutralization during web page generation. The issue affects versions up to 08072026, and the vendor has discontinued support for the product.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Reflected XSS. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.