CVE-2026-19727

🔶 medium

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issue affects Library Information and Document Automation Program: before v22.2.

CVSS Score

6.1

Medium

EPSS Score

0.2

Exploit Probability

Published Date

2026-09-04

First Seen: 2026-09-05

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 37.7% of all 353,061 vulnerabilities in our database.

#220,116

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Sep 4, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Partial

Limited system impact

🏆 Discovered By

İremnur YILMAZ

SSVC data provided by CISA

Last Modified 2026-09-04

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE IDs (Weakness Types)

CWE-79

CVE-2026-19727

Summary

📊 Relative Risk Intelligence

🎯 CISA SSVC Assessment Updated: Sep 4, 2026

📦 Affected Products 0

🔗 References 1