CVE-2026-5219

HighCVSS 8.3

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Softtr Information Technology Trade Ltd. Co. E-Commerce Pack before version 5.03.01.49 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

An attacker may change store settings, add products, or perform other administrative actions without user consent.

Recommendation

Update E-Commerce Pack to version 5.03.01.49 or later.

Other vulnerabilities in E-Commerce Pack

See all

CVE-2026-4378Medium
The E-Commerce Pack by Akilli Ticaret Software Technologies Ltd. is vulnerable to Stored Cross-Site Scripting due to improper neutralization of input during web page generation. The issue affects versions from 4.5.001 through 28082026. The vendor was contacted but did not respond.
CVE-2026-5218Medium
XSS vulnerability in Softtr Informatics E-Commerce Pack due to improper neutralization of script-related HTML tags. Allows Cross-Site Scripting attacks.

Original NVD description (English source)

Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49.