CVE-2026-4772
published 2026-07-02CVE-2026-4772: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This…
PriorityP425medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.23%
12.0th percentile
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tr7_cyber_defense_inc | waf-asp | >= v1.0.324.900 < v1.4.0.117 | v1.4.0.117 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TR7 Cyber Defense WAF-ASP prior 1.4.0.117 cross site scripting
vuldb·2026-07-02·CVSS 5.4
CVE-2026-4772 [MEDIUM] TR7 Cyber Defense WAF-ASP prior 1.4.0.117 cross site scripting
A vulnerability was found in TR7 Cyber Defense WAF-ASP. It has been rated as problematic. Affected is an unknown function. The manipulation leads to cross site scripting.
This vulnerability is referenced as CVE-2026-4772. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
GHSA
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc.
ghsa_unreviewed·2026-07-02
CVE-2026-4772 [MEDIUM] CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
No detection rules found.
No public exploits indexed.
2026-07-02
Published