Skip to content
OpenAdvisories
High · 7.6 CVE-2026-5783 EUVD-2026-31122GHSA-q787-v8vf-vc3c

Reflected XSS in Beyaz Computer's CityPLus

Published May 20, 2026 · Updated May 20, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS.

This issue affects CityPLus: before V24.29750.1.0.

Affected products

VendorProductAffectedFixed
Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus < V24.29750.1.0 V24.29750.1.0

References