Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00181·Published 2026-10-27·Fixed in v26.10.0CWE-79