Cross-Site Scripting Vulnerability in Webbeyaz Web Design Mediküm Web
CVE-2026-8315

5.4MEDIUM

Key Information:

Vendor

Webbeyaz Web Design

Status
Mediküm Web
Vendor
CVE Published:
8 July 2026

What is CVE-2026-8315?

A cross-site scripting vulnerability exists in Webbeyaz Web Design Mediküm Web, where improper handling of user input during web page generation can allow attackers to inject malicious scripts. This stored XSS flaw poses a risk as it could be exploited to manipulate user sessions, access sensitive information, or perform actions on behalf of users without their consent. It is crucial for users of Mediküm Web to be aware of this vulnerability and consider mitigation strategies, especially since the vendor has indicated that the product is no longer supported.

Affected Version(s)

Mediküm Web 0 <= 08072026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.