CVE-2026-4772

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - iletisim@usom.gov.tr

Published

2026-07-02

Last modified

2026-10-25

Weaknesses

CWE-79

Affected products

• Waf-asp (Tr7 Cyber Defense Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487