Medium · 5.4 CVE-2026-82969 EUVD-2026-88169GHSA-w8rw-4wrv-gh97

Stored XSS in BİMSER's eBA Plus

Published Sep 28, 2026 · Updated Sep 28, 2026 · Assigned by TR-CERT

Vendor: Bimser Solution Software Trade Product: eBA Plus Document and Workflow Management System

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Affected products

Vendor	Product	Affected	Fixed
Bimser Solution Software Trade	eBA Plus Document and Workflow Management System	6.7.141 – < 10.0.11	10.0.11

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1197 government-resource