CVE-2026-5738: CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE

This vulnerability (CVE-2026-5738) in DoXBASE is due to improper input neutralization during web page generation, classified as CWE-79 (Cross-Site Scripting). It allows an attacker to perform Cross Zone Scripting attacks. The affected product is DoXBASE up to version 27082026. The vendor has not provided any response or patch. The CVSS 3.1 vector indicates the attack is network accessible with low attack complexity, no privileges required, user interaction required, and impacts confidentiality and integrity with no availability impact.

Successful exploitation could allow an attacker to execute scripts in the context of the affected web application, potentially leading to unauthorized disclosure of information and modification of data. There is no indication of availability impact. No known exploits are reported in the wild.

No official patch or remediation is currently available from the vendor. Users should monitor for vendor updates and consider implementing web application firewalls or input validation as interim mitigations. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.