Skip to content
OpenAdvisories
Low · 3.5 CVE-2026-89290 EUVD-2026-94983GHSA-95jq-mxqx-3p79

HTML Injection in İzometri Informatics' eimzamip

Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by TR-CERT

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS.

This issue affects eimzamip: from v1.6.4 before v1.6.7.

Affected products

VendorProductAffectedFixed
İzometri IT Services Domestic and Foreign Trade eimzamip v1.6.4 – < v1.6.7 v1.6.7

References