CVE-2024-9147

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1.

Score

CVSS 4.0 6.9 Medium

Status

Modified - iletisim@usom.gov.tr

Published

2024-11-04

Last modified

2026-06-02

Weaknesses

CWE-79, CWE-80

Affected products

• Pospratik (Bna)
• Pospratik (Bna Informatics)
• Pospratik (Bnabilisim)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1815
• https://www.usom.gov.tr/bildirim/tr-24-1815