Stored XSS Vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll
CVE-2026-6793

5.4MEDIUM

Key Information:

Vendor

Bifra Engineering Consulting Ltd.

Status
Q-smart Next Poll
Vendor
CVE Published:
20 July 2026

What is CVE-2026-6793?

A Stored XSS vulnerability exists in Q-smart NexT Poll developed by Bifra Engineering Consulting Ltd. This security flaw allows malicious actors to inject harmful scripts into web applications, which can then be executed in the browsers of users accessing the compromised pages. The vulnerability arises due to improper input sanitation during web page generation, affecting all versions prior to 1.8.7. Organizations using earlier versions of Q-smart NexT Poll should take immediate action to upgrade their products and implement stronger input validation practices to mitigate potential risks.

Affected Version(s)

Q-smart NexT Poll 0 < 1.8.7

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yusuf Kamil ÇAVUŞOĞLU
.