CVE-2026-5793 is a reflected cross-site scripting (XSS) vulnerability in BiEticaret by Inrove Software and Internet Services. The vulnerability arises from improper neutralization of input during web page generation, enabling attackers to inject and reflect malicious scripts to users. It affects all BiEticaret versions prior to 3.3.57. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The vulnerability impacts confidentiality and integrity but not availability. No official patch or remediation level has been stated by the vendor as of the published date.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application for users who interact with crafted URLs or inputs. This can lead to partial compromise of confidentiality and integrity of user data within the application session. Availability is not impacted. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted inputs or links related to BiEticaret versions prior to 3.3.57. Implementing web application firewall (WAF) rules to detect and block reflected XSS attempts may provide temporary mitigation.