CVE-2026-12380
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Reflected XSS vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack due to improper input neutralization during web page generation. Affects versions through 2026-10-06.
Risk Assessment
An attacker can exploit this to execute malicious scripts in a victim's browser, potentially leading to session theft, account takeover, or displaying fake content.
Recommendation
Update E-Commerce Pack to a version newer than 2026-10-06 if available. Additionally, implement input filtering and encoding mechanisms in the application.
Other vulnerabilities in E-Commerce Pack
See all- CVE-2026-11795Medium
An observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack before 5.03.01.54.
- CVE-2026-4378Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.
- CVE-2026-5218Medium
XSS vulnerability in Softtr Informatics E-Commerce Pack due to improper neutralization of script-related HTML tags. Allows Cross-Site Scripting attacks.
- CVE-2026-5219High
Softtr Information Technology Trade Ltd. Co. E-Commerce Pack before version 5.03.01.49 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of an authenticated user.
Original NVD description (English source)
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS