Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-105323 EUVD-2026-110760GHSA-cfrm-m96r-rwgj

Reflected XSS in Kulga Software's Kulga News Software

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.

This issue affects Kulga News Software: from v26.7.4 before v26.10.0.

Affected products

VendorProductAffectedFixed
Kulga Software and Telecommunications Limited Company Kulga News Software v26.7.4 – < v26.10.0 v26.10.0

References