Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-4770 EUVD-2026-41369GHSA-w8ww-7f32-x6g5

DOM-Based XSS in TR7's WAF-ASP

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS.

This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.

Affected products

VendorProductAffectedFixed
TR7 Cyber ​​Defense WAF-ASP v1.0.42.239 – < v1.4.0.117 v1.4.0.117

References