CVE WatchAug 6, 2026

CVE-2026-8166

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc.

CVSS

5.4

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 6, 2026 · Last modified: Aug 6, 2026 · CWE-79

EPSS · 30d

Not enough EPSS history yet.

Technical description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Logo Software Industry and Trade Inc. E-Logo Purchasing Portal allows Stored XSS. This issue affects e-Logo Purchasing Portal: before 1.52.

Official references

siberguvenlik.gov.trhttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0769

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-667117.1 HIG

—

———Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions.6h CVE-2026-667077.1 HIG

—

———Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.6h CVE-2026-667065.9 MED

—

———Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.6h CVE-2026-667057.1 HIG

—

———Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.5h CVE-2026-667036.5 MED

—

———Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.6h CVE-2026-667027.1 HIG

—

———Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions.6h