EUVD-2026-52653
GHSA-qrm8-6428-fgf7
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Network-exploitable stored XSS requiring a low-privilege account (PR:L) and active victim page view (UI:R); scope change reflects browser sandbox crossing; no availability impact.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
2DescriptionCVE.org
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Stored XSS.
This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.
AnalysisAI
Stored XSS in HUMANIST Digital Human Resources version 26.0 enables authenticated low-privilege users to inject persistent malicious scripts that execute in the browsers of other platform users, including higher-privileged HR administrators. The vulnerability was disclosed by TR-CERT (advisory TR-26-0737) and is resolved in version 26.1. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid low-privilege authenticated account on the HUMANIST Digital Human Resources platform (confirmed by PR:L in the CVSS vector) - unauthenticated external attackers cannot exploit this vulnerability directly. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N scores 5.4 (Medium), accurately reflecting that network reachability and low attack complexity are offset by the PR:L (authenticated attacker) and UI:R (victim must navigate to the poisoned page) requirements. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with a valid low-privilege account (e.g., a standard employee account) submits a crafted input containing a JavaScript payload into an HR form field - such as an employee profile, leave request comment, or feedback form - that is later rendered in the administrator dashboard without sanitization. When an HR administrator views the affected record, the stored script executes in their browser, allowing the attacker to exfiltrate the administrator's session token and escalate access within the platform. … |
| Remediation | Upgrade HUMANIST Digital Human Resources to version 26.1 or later, which resolves this stored XSS vulnerability per TR-CERT advisory TR-26-0737 (https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Remote code execution in Bilin Software HUMANIST Digital Human Resources versions 26.0 through 26.1 allows unauthenticat
Cleartext storage of sensitive information combined with SQL injection affects Bilin Software's HUMANIST Digital Human R
Sensitive-data exposure in Bilin Software's HUMANIST Digital Human Resources (versions 26.0 up to but not including 26.1
Session hijacking is possible in HUMANIST Digital Human Resources (versions 26.0 through before 26.1) due to sensitive s
Insufficient session expiration in HUMANIST Digital Human Resources version 26.0 allows an attacker who obtains a valid
Path traversal in HUMANIST Digital Human Resources version 26.0 enables authenticated remote attackers to read arbitrary
Open redirect in HUMANIST Digital Human Resources (versions 26.0 through pre-26.1) enables authenticated attackers to cr
Observable response discrepancy in HUMANIST Digital Human Resources 26.0 exposes the system to unauthenticated account f
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today