CVE-2026-89290CWE-80
CVE-2026-89290
Low · published October 8, 2026
What it is
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS.
This issue affects eimzamip: from v1.6.4 before v1.6.7.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00156 · 4.4th percentile
- Weakness
- CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- Published
- 2026-10-08T18:17Z
References (1)
EPSS history
Timeline