CVE-2026-5783 Reflected XSS in Beyaz Computer's CityPLus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS. This issue affects CityPLus: before V24.29750.1.0...

CVE-2026-5783 Reflected XSS in Beyaz Computer's CityPLus

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS. This issue affects CityPLus: before V24.29750.1.0...

PT-2026-42185

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS. This issue affects CityPLus: before V24.29750.1.0...

CVE-2025-11151

CVE-2025-11151 affects Beyaz CityPLus (CityPLus) prior to version 24.29500.1.0. Issue: Exposure of sensitive information to an unauthorized actor, including sensitive system information and unpublicized web pages, with a CVSS 3.1 base score of 8.2 (HIGH). Impact: information disclosure that could...

CVE-2025-10468

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Beyaz Computer CityPlus allows Path Traversal. This issue affects CityPlus: before 24.29375...

CVE-2025-10468 Path Traversal in Beyaz Computer's CityPLus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Beyaz Computer CityPlus allows Path Traversal. This issue affects CityPlus: before 24.29375...

CVE-2025-10468 Path Traversal in Beyaz Computer's CityPLus

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Beyaz Computer CityPlus allows Path Traversal. This issue affects CityPlus: before 24.29375...

CVE-2025-10468

CVE-2025-10468 describes a path traversal vulnerability in Beyaz Computer CityPlus. The root cause is an improper limitation of a pathname to a restricted directory, allowing traversal attacks. Affected versions are CityPlus before 24.29375. The CVSS 3.1 score is 7.5 (HIGH) with network attack ve...

Beyaz Computer CityPlus 路径遍历漏洞

Beyaz Computer CityPlus is an electronic document management platform from Beyaz Computer in Turkey. A path traversal vulnerability exists in Beyaz Computer CityPlus versions prior to 24.29375, which stems from an improperly restricted pathname and could lead to a path traversal attack...