CVE-2026-12682
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Sep 10, 2026
Vendor
unknown
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.