Cross-Site Scripting Vulnerability in FileOrbis by Fileorbis Informatics Services
CVE-2026-19447

5.4MEDIUM

Key Information:

Vendor

Fileorbis Informatics Services Trade Inc.

Status
Fileorbis
Vendor
CVE Published:
18 August 2026

What is CVE-2026-19447?

An input validation flaw in FileOrbis allows an attacker to exploit cross-site scripting vulnerabilities. This issue enables stored XSS, where malicious scripts can be injected into web pages, affecting users when they access compromised content. The vulnerability impacts all versions of FileOrbis prior to 16.5, posing a risk to web security and user data integrity.

Affected Version(s)

FileOrbis 0 < 16.5

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tahsin ĂśnlĂĽtĂĽrk
.