Cross-Site Scripting Vulnerability in Bar Association Website by KA Informatics Technologies
CVE-2026-11757

6.1MEDIUM

Key Information:

Vendor

Ka Informatics Technologies Ltd. Co.

Status
Bar Association Website
Vendor
CVE Published:
18 September 2026

What is CVE-2026-11757?

A cross-site scripting vulnerability exists in the Bar Association Website developed by KA Informatics Technologies. This issue allows attackers to manipulate the web page generation process, leading to reflected XSS attacks. This vulnerability could enable an adversary to inject malicious scripts into the web pages, potentially compromising user data and security. Early disclosure attempts to the vendor went unanswered, highlighting the urgency for users to secure their web applications against potential exploitation.

Affected Version(s)

Bar Association Website 0 <= 18092026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.