CVE-2026-77818
Reflected HTML Injection via Form Hijacking in Yordam Informatics's Library Automation System
CVSS Score
6.1
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Content Spoofing. This issue affects Library Information and Document Automation Program: from v22.1 before v22.2.
| CWE | CWE-79 |
| Vendor | yordam information technology consulting, training and electronic systems industry and trade inc. |
| Product | library information and document automation program |
| Published | Sep 4, 2026 |
| Last Updated | Sep 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for yordam information technology consulting, training and electronic systems industry and trade inc. library information and document automation program
Be the first to know when new medium vulnerabilities affecting yordam information technology consulting, training and electronic systems industry and trade inc. library information and document automation program are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. / Library Information and Document Automation Program
v22.1 < v22.2
References
Credits
Alkım Coşkun