CVE-2026-4772 – Stored XSS in TR7’s WAF-ASP

CVE ID :CVE-2026-4772

Published : July 2, 2026, 12:50 p.m. | 56 minutes ago

Description :Improper neutralization of input during web page generation (‘cross-site scripting’) vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Stored XSS.

This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…