CVE-2026-89290

LowCVSS 3.5

Published: 08/10/2026(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.

Risk Assessment

An attacker can inject a persistent script into the application that executes in other users' browsers, potentially leading to session or data theft.

Recommendation

Update eimzamip to version v1.6.7 or later to remove the Stored XSS vulnerability.

Other vulnerabilities in eimzamip

CVE-2026-91844High
Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS