Medium severity5.4NVD Advisory· Published Jul 20, 2026· Updated Jul 20, 2026

CVE-2026-6793

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll allows Stored XSS.

This issue affects Q-smart NexT Poll: before 1.8.7.

Affected products

Bifra Engineering Consulting Ltd./Q-smart NexT Pollllm-fuzzy
Range: <1.8.7

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0583nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000