Cross-Site Scripting Vulnerability in Bimser Solution Software eBA Plus Document and Workflow Management System
CVE-2026-82969

5.4MEDIUM

Key Information:

Vendor: Bimser Solution Software Trade Inc.
Status: Eba Plus Document And Workflow Management System
Vendor: CVE Published:; 28 September 2026

🔔 Create Bimser Solution Software Trade Inc. Vulnerability Alert

What is CVE-2026-82969?

The eBA Plus Document and Workflow Management System from Bimser Solution Software is vulnerable to a Cross-Site Scripting (XSS) flaw that allows attackers to inject malicious scripts. This vulnerability occurs due to improper handling of user input during web page generation, resulting in stored XSS. Attackers can exploit this issue to execute arbitrary scripts in the context of a user's session, potentially leading to data theft and unauthorized actions within the application. Users and administrators of affected versions should prioritize updates to mitigate this risk.

Affected Version(s)

eBA Plus Document and Workflow Management System 6.7.141 < 10.0.11

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 28, 2026
Vulnerability Reserved
Aug 31, 2026

Credit

Osman Can Vural

CVE-2026-82969 Data

JSON