Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-16020 EUVD-2026-111826GHSA-m788-xh5w-fhrf

Stored XSS Fazile BACAK's DefterAsist Financial Advisor Platform

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fazile BACAK DefterAsist Financial Advisor Platform allows Stored XSS.

This issue affects DefterAsist Financial Advisor Platform: through 2026-10-27.

Affected products

VendorProductAffectedFixed
Fazile BACAK DefterAsist Financial Advisor Platform ≤ 2026-10-27 —

References