Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-87752 EUVD-2026-88222GHSA-hhm4-wvmf-2x62

HTML Injection in Rolantis Information Technologies' Agentis

Published Sep 28, 2026 · Updated Sep 28, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows XSS Targeting HTML Attributes.

This issue affects Agentis: from 4.44 before 4.6.

Affected products

VendorProductAffectedFixed
Rolantis Information Technologies Tourism Industry and Trade Agentis 4.44 – < 4.6 4.6

References