Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting.
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00468·Published 2026-07-09·Fixed in v3.3.57CWE-89
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00253·Published 2026-07-09·Fixed in v3.3.57CWE-79