CVE-2026-19727mediumCWE-79

CVE-2026-19727: medium-severity vulnerability in Yordam Information Technology Consulting…

HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System

Published

Follow this CVE+ Monitor Library Information and Document Automation Program

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 0.3%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. · Library Information and Document Automation Program
Related CVEs — Yordam Information Technology Consulting…

In the same product, most dangerous first.

CVE-2026-77818MEDIUMReflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation SystemEPSS 0.3%