medium5.4
CVE-2026-4772
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc.
Impact
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
Affected products
| Product | Affected versions |
|---|---|
| WAF-ASP: From V1.0.324.900 | before 1.4.0.117. |
Versions were read from the advisory text. No structured product data has been published for this record yet.