What is CVE-2026-19727?

CVE-2026-19727 is a medium-severity vulnerability, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-09-04.

How severe is CVE-2026-19727?

Medium severity. CVSS v3 base score is 6.1 out of 10.

CVE-2026-19727

CVE-2026-19727

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.

Vulnerability class: XSS (Cross-Site Scripting)

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

iletisim@usom.gov.tr

Frequently asked questions

What is CVE-2026-19727?: CVE-2026-19727 is a medium-severity vulnerability, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2026-09-04.
How severe is CVE-2026-19727?: Medium severity. CVSS v3 base score is 6.1 out of 10.