CVE-2026-5782 PUBLISHED

Reflected XSS in Loglama.NET's TurkHotspot

Assigner: TR-CERT
Reserved: 08.04.2026 Published: 02.10.2026 Updated: 02.10.2026

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Loglama.net TurkHotspot allows Reflected XSS.

This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not supported.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS Score: 5.2

Product Status

Vendor Loglama.net
Product TurkHotspot
Versions Default: unknown
  • affected from 0 to 2026-10-02 (incl.)

Credits

  • Yiğit DUMAN finder

References

Problem Types

  • CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') CWE

Impacts

  • CAPEC-591 Reflected XSS