All vulnerabilities
CVE-2026-82969

Stored XSS in BİMSER's eBA Plus

Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management System
Open in ThreatlineRecord JSON
CVSS
5.4Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in10.0.11Fixed versionCVE List
Published28 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

  • 10.0.11eBA Plus Document and Workflow Management SystemCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

Text from CVE List

Affected versions 1

  • eBA Plus Document and Workflow Management Systemaffected: 6.7.141 before 10.0.11CVE List

References 1