CVE-2026-19727: HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes.
This issue affects Library Information and Document Automation Program: before v22.2.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Yordam Informatics Library Information and Document Automation Program versions before v22.2.
What does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation is network-accessible, requires low complexity, and does not require privileges. It does require user interaction.
What is the potential impact if exploitation succeeds?
The vulnerability can allow cross-site scripting targeting HTML attributes. The stated impact includes low confidentiality and integrity impact, with no availability impact.