Is CVE-2026-89290 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-89290?

CVE-2026-89290 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-89290

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. This issue affects eimzamip: from v1.6.4 before v1.6.7.