Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-92085 EUVD-2026-95775GHSA-68jg-29g6-43hw

Stored XSS in TMT Machine's Talassoft Industrial Management Software

Published Oct 9, 2026 · Updated Oct 9, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS.

This issue affects Talassoft Industrial Management Software: before V16.0.1.

Affected products

VendorProductAffectedFixed
TMT Machinery Industry and Trade Talassoft Industrial Management Software < V16.0.1 V16.0.1

References