SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-8315

MEDIUM · CVSS 5.4 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-08 · Last synced 2026-08-07

CyberRota Analysis

AI-Generated

The Mediküm Web application is vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of users' browsers, potentially leading to data theft or session hijacking. Organizations still using this unsupported product should prioritize remediation efforts to mitigate the associated risks.

CVE
CVE-2026-8315
Severity
MEDIUM
CVSS
5.4
EPSS
0.13%

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webbeyaz Web Design Mediküm Web allows Stored XSS. This issue affects Mediküm Web: through 08072026. NOTE: The vendor was contacted and it was learned that the product is not supported.