Vulnerabilities ›

CVE-2026-5783

High

CWE-79 — Weakness Type

                    Published: May 20, 2026                      ·  Modified: May 27, 2026                      ·  Source: NVD                

CVSS v3

7.6

🔗 NVD Official

📄 Description (English)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS.

This issue affects CityPLus: before V24.29750.1.0.

🤖 AI Executive Summary

CVE-2026-5783 is a reflected cross-site scripting (XSS) vulnerability in Beyaz CityPLus software versions before V24.29750.1.0 that allows attackers to inject malicious scripts through improper input neutralization. Organizations using affected versions are at risk of session hijacking, credential theft, and unauthorized actions performed on behalf of users.

📄 Description (Arabic)

تؤثر هذه الثغرة على تطبيق CityPLus من Beyaz قبل الإصدار V24.29750.1.0 وتسمح بحقن رموز JavaScript ضارة عبر معاملات الويب. يمكن للمهاجمين استغلال هذه الثغرة لسرقة جلسات المستخدمين والبيانات الحساسة والتحكم في حسابات المستخدمين.

🤖 ملخص تنفيذي (AI)

A reflected XSS vulnerability exists in Beyaz CityPLus before version V24.29750.1.0 due to improper input sanitization during web page generation. Attackers can exploit this to execute arbitrary JavaScript in users' browsers, potentially compromising sensitive data and user sessions.

🤖 AI Intelligence Analysis Analyzed: May 22, 2026 15:58

🇸🇦 Saudi Arabia Impact Assessment

Saudi Relevance: high

🏢 Affected Saudi Sectors

government telecom

🎯 MITRE ATT&CK Techniques

T1190 T1598 T1566

⚖️ Saudi Risk Score (AI)

8.0

/ 10.0

🔧 Remediation Steps (English)

Immediately upgrade Beyaz CityPLus to version V24.29750.1.0 or later. Implement input validation and output encoding for all user-supplied data. Deploy Web Application Firewall (WAF) rules to detect and block XSS payloads. Conduct security awareness training for users regarding suspicious links.

🔧 خطوات المعالجة (العربية)

قم بترقية Beyaz CityPLus إلى الإصدار V24.29750.1.0 أو أحدث فوراً. طبق التحقق من صحة المدخلات وترميز المخرجات لجميع بيانات المستخدم. نشر قواعد جدار حماية تطبيقات الويب لكشف حمولات XSS. إجراء تدريب التوعية الأمنية للمستخدمين بشأن الروابط المريبة.

📋 Regulatory Compliance Mapping

🟢 NCA ECC 2024

A.7.1.1 A.7.1.2 A.14.2.1

🔵 SAMA CSF

ID.RA-1 PR.DS-1 PR.DS-6

🟡 ISO 27001:2022

A.14.2.1 A.14.2.5

🔗 References & Sources 1

🔗

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0263

iletisim@usom.gov.tr

📊 CVSS Score

7.6

/ 10.0 — High

📊 CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Attack VectorN — None / Network

Attack ComplexityL — Low / Local

Privileges RequiredN — None / Network

User InteractionR — Required

ScopeU — Unchanged

ConfidentialityL — Low / Local

IntegrityL — Low / Local

AvailabilityH — High

📋 Quick Facts

Severity High

CVSS Score7.6

CWECWE-79

EPSS0.04%

Exploit No

Patch ✗ No

Published 2026-05-20

Source Feed nvd

🇸🇦 Saudi Risk Score

8.0

/ 10.0 — Saudi Risk

Priority: HIGH

🏷️ Tags

CWE-79

⚡ Actions

🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details

CVE-2026-5783

Introduce Yourself

Sign In Required