CVE-2026-7498

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Basamak Information Technology Consulting and Organization Trade Ltd. Co. DernekWeb allows Stored XSS. This issue affects DernekWeb: through 30122025.

Score

CVSS 3.1 8.8 High

Status

Deferred - iletisim@usom.gov.tr

Published

2026-05-18

Last modified

2026-10-26

Weaknesses

CWE-79

Affected products

• Dernekweb (Basamak Information Technology Consulting And Organization Trade Ltd. Co.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0258