Files
vuln-nvd/data/2026/CVE-2026-3251.json
T

2 lines
2.2 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"Mezunum Satiyorum","vendor":"Webremium Istanbul Web Design","versions":[{"lessThanOrEqual":"10072026","status":"affected","version":"1.2.504","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul Web Design Mezunum Satiyorum allows Stored XSS.\n\nThis issue affects Mezunum Satiyorum: from 1.2.504 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"es","value":"Neutralización incorrecta de la entrada durante la generación de páginas web (’cross-site scripting’) vulnerabilidad en Webremium Istanbul Web Design Mezunum Satiyorum permite XSS Almacenado.\n\nEste problema afecta a Mezunum Satiyorum: desde 1.2.504 hasta 10072026. NOTA: Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."}],"id":"CVE-2026-3251","lastModified":"2026-10-25T15:10:00.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":2.7,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3251","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-10T17:39:09.185686Z","version":"2.0.3"}}]},"published":"2026-07-10T17:16:57.367","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0525"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}