Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-10876 EUVD-2025-202051GHSA-qmrc-xc5v-v23c

XSS in Talent Software's e-Bap

Published Dec 9, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting (XSS).

This issue affects e-BAP Automation: from 1.8.96 before v.41815.

Affected products

VendorProductAffectedFixed
Talent Software e-BAP Automation 1.8.96 – < v.41815 v.41815

References