Cross-Site Scripting Vulnerability in Inrove Software BiEticaret
CVE-2026-5793

6.1MEDIUM

Key Information:

Vendor: Inrove Software And Internet Services
Status: Bieticaret
Vendor: CVE Published:; 9 July 2026

🔔 Create Inrove Software And Internet Services Vulnerability Alert

What is CVE-2026-5793?

A cross-site scripting vulnerability exists in Inrove Software's BiEticaret, which improperly neutralizes input during web page generation. This flaw allows attackers to execute malicious scripts in the context of a user's browser session, potentially leading to credential theft and session hijacking. The vulnerability impacts versions of BiEticaret prior to v3.3.57. Users are advised to upgrade to the latest version to mitigate this risk.

Affected Version(s)

BiEticaret 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 9, 2026
Vulnerability Reserved
Apr 8, 2026

Credit

Ferit ÖZNER

CVE-2026-5793 Data

JSON