Vulnerability · Published Jul 10, 2026 · Assigned by TR-CERT
CVE-2026-3251XSS in Webremium's Mezunum Satiyorum
Medium 6.4
In plain English
A medium-severity cross-site scripting in Mezunum Satiyorum from Webremium Istanbul Web Design. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)6.4Medium
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Webremium Istanbul Web Design Mezunum Satiyorum allows Stored XSS. This issue affects Mezunum Satiyorum: from 1.2.504 through 10072026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Webremium Istanbul Web Design | Mezunum Satiyorum | 1.2.504 – through 10072026 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0525 government-resource