CVE-2026-105323
CVE-2026-105323 · Reflected XSS in Kulga Software's Kulga News Software
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS. This issue affects Kulga News Software: from v26.7.4 before v26.10.0.
CVSS 6.1 · Medium · Fix available
- Published
- Updated
Affected products and versions
kulga news software
- Versions
- ≥ v26.7.4, < v26.10.0: Affected (custom)
Update to v26.10.0