PT-2026-61624 · Unknown · Q-Smart Next Poll

CVE-2026-6793 · Published 2026-07-20 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Q-smart NexT Poll versions prior to 1.8.7

Description Stored cross-site scripting occurs due to improper neutralization of input during web page generation. This allows an attacker to store malicious scripts on the server, which are then executed in the browser of other users who view the affected page.

Recommendations Update Q-smart NexT Poll to version 1.8.7 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-6793

Affected Products

Q-Smart Next Poll

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-6793 · Security Note
• https://twitter.com/CVEnew/status/2079238918835245224 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0583 · Note