CVE-2026-5738

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE allows Cross Zone Scripting. This issue affects DoXBASE: through 27082026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

  • Published Aug 27, 2026
  • CVSS 6.1 medium
  • 0.3% chance of exploitation in the next 30 days (EPSS)
  • No fix is known yet

Affected software

CVE-2026-5738 at the National Vulnerability Database