Vulnerability · Published Jul 3, 2026 · Assigned by TR-CERT

CVE-2026-4322XSS in Raera's Destekz

Medium 6.1

In plain English

A medium-severity cross-site scripting in Destekz from Raera - Ankara Web Design and Digital Advertising Agency. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.3%top 83.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Raera - Ankara Web Design and Digital Advertising Agency Destekz allows Reflected XSS. This issue affects Destekz: through 02062026. NOTE: The vendor was contacted and it was learned that the product is not supported.

Affected products (as reported)

Vendor	Product	Versions
Raera - Ankara Web Design and Digital Advertising Agency	Destekz	0 – through 02062026

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0488 government-resource