CVE-2022-2266

Published: Sep 22, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD (Secondary)

Description

University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability. This has been fixed in the version 19.2

Affected (1)

Products: Yordam: Library Automation System

Yordam

1 product

Library Automation System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Yordam Library Automation System	Before 19.2

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (3)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0637

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-22-0637

Source: iletisim@usom.gov.tr

Third Party Advisory

https://www.usom.gov.tr/bildirim/tr-22-0637

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.