Cross-Site Scripting Vulnerability in Raera by Destekz
CVE-2026-4322

6.1MEDIUM

Key Information:

Vendor

Raera - Ankara Web Design And Digital Advertising Agency

Status
Destekz
Vendor
CVE Published:
3 July 2026

What is CVE-2026-4322?

A reflected cross-site scripting vulnerability exists in Raera, a web design platform by Destekz. This flaw allows attackers to inject malicious scripts into web pages, affecting users who interact with the compromised sites. It is critical for organizations using Raera to implement protective measures and ensure the security of their web applications, especially since the vendor no longer supports the affected product as of June 2nd, 2026.

Affected Version(s)

Destekz 0 <= 02062026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hasan YILDIZ
.