Defterasist Financial Advisor Platform
Monthly
Stored cross-site scripting in the DefterAsist Financial Advisor Platform (all versions through 2026-10-27) allows an authenticated user with low privileges to persist a script payload that later executes in another user's browser when the affected page is rendered. Rated CVSS 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), the flaw requires both a valid low-privileged account to plant the content and a separate victim to interact with the page, and its impact is confined to the victim's browser session with low confidentiality and integrity effects and no availability impact. Reported by Turkey's national CERT (TR-CERT) and tracked as EUVD-2026-111826; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the priority label is this_month.
Stored cross-site scripting in the DefterAsist Financial Advisor Platform (all versions through 2026-10-27) allows an authenticated user with low privileges to persist a script payload that later executes in another user's browser when the affected page is rendered. Rated CVSS 5.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), the flaw requires both a valid low-privileged account to plant the content and a separate victim to interact with the page, and its impact is confined to the victim's browser session with low confidentiality and integrity effects and no availability impact. Reported by Turkey's national CERT (TR-CERT) and tracked as EUVD-2026-111826; no public exploit code and no confirmed active exploitation were identified at time of analysis, and the priority label is this_month.