CVE-2026-89290

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.

• CWE-80

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1275

Published

Oct 8, 2026

Last Modified

Oct 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-89284Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-89285The Datalist it WordPress plugin through 0.0.3 does not sani…8.6
• CVE-2026-89286The FormFlow for GoHighLevel (GHL) WordPress plugin through…5.3
• CVE-2026-89287The ASPL Product Quotation WordPress plugin through 1.1.0 do…8.6
• CVE-2026-89288The Fast Courier WordPress plugin before 5.2.4 does not san…8.6
• CVE-2026-89289The Fast Courier WordPress plugin through 5.2.3 does not re…5.3
• CVE-2026-89294The Simply Schedule Appointments plugin for WordPress is vul…7.5
• CVE-2026-89296The Pro Like Button WordPress plugin before 2.0 does not pro…8.6
• CVE-2026-89297The Loja Automática WordPress plugin through 1.0.0 does not …8.6
• CVE-2026-89298A flaw was found in the Dynamic Client Registration service …4.9
• CVE-2026-89299The WP Verify API WordPress plugin through 1.0.0 does not pr…8.6
• CVE-2026-89300The WP Verify API WordPress plugin through 1.0.0 does not ha…5.3