{"id":"CVE-2026-105323","revision":"ba068c2ebb4540dca66943d084eb7e47","records":[{"revision":"ba068c2ebb4540dca66943d084eb7e47","observedAt":"2026-10-27T13:09:22.002+00:00","statement":{"source":"cve-program","id":"CVE-2026-105323","aliases":[],"title":"Reflected XSS in Kulga Software's Kulga News Software","description":"Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.\n\nThis issue affects Kulga News Software: from v26.7.4 before v26.10.0.","state":0,"publishedAt":"2026-10-27T11:39:34.238+00:00","modifiedAt":"2026-10-27T11:39:34.238+00:00","affected":[{"ecosystem":"Vendor product","name":"Kulga News Software","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Kulga Software and Telecommunications Limited Company\",\n                    \"product\": \"Kulga News Software\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"v26.7.4\",\n                            \"lessThan\": \"v26.10.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","score":6.1,"severity":"MEDIUM"}],"references":["https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1405"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105323","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105323","identifiers":["CVE-2026-105323"]},"retained":false,"historicalAffected":[]}],"coverage":[]}