CVE-2026-77818: Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing.
This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects Yordam Informatics Library Information and Document Automation Program versions from v22.1 before v22.2. Version v22.2 is not identified as affected in the provided information.
What does an attacker need to exploit this issue?
The vector is network-based, requires low attack complexity, and requires no privileges. Exploitation does require user interaction, indicating an attacker must induce a user to interact with crafted content or a crafted request.
What is the likely impact of successful exploitation?
The reported impact is content spoofing through reflected HTML injection. The severity vector indicates low confidentiality and integrity impact, no availability impact, and scope change.