Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-5738 EUVD-2026-67126GHSA-xj5x-gxhg-vqmq

Reflected XSS in BilPark's DoXBASE

Published Aug 27, 2026 · Updated Aug 27, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting.

This issue affects DoXBASE: through 27082026. 
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
BilPark Informatics Technologies Industry and Trade DoXBASE ≤ 27082026 —

References