🔐 CVE Alert

CVE-2026-3251

MEDIUM 6.4

XSS in Webremium's Mezunum Satiyorum

CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul Web Design Mezunum Satiyorum allows Stored XSS. This issue affects Mezunum Satiyorum: from 1.2.504 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CWE CWE-79
Vendor webremium istanbul web design
Product mezunum satiyorum
Published Jul 10, 2026
Last Updated Jul 10, 2026
Stay Ahead of the Next One

Get instant alerts for webremium istanbul web design mezunum satiyorum

Be the first to know when new medium vulnerabilities affecting webremium istanbul web design mezunum satiyorum are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

Webremium Istanbul Web Design / Mezunum Satiyorum
1.2.504 ≤ 10072026

References

NVD ↗ CVE.org ↗ EPSS Data ↗
siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0525

Credits

Onurcan GENÇ