All packages
E-Commerce Pack vulnerabilities
3 known CVE vulnerabilities in E-Commerce Pack, translated and rated.
- CVE-2026-4378Medium
The E-Commerce Pack by Akilli Ticaret Software Technologies Ltd. is vulnerable to Stored Cross-Site Scripting due to improper neutralization of input during web page generation. The issue affects versions from 4.5.001 through 28082026. The vendor was contacted but did not respond.
- CVE-2026-5218Medium
XSS vulnerability in Softtr Informatics E-Commerce Pack due to improper neutralization of script-related HTML tags. Allows Cross-Site Scripting attacks.
- CVE-2026-5219High
Softtr Information Technology Trade Ltd. Co. E-Commerce Pack before version 5.03.01.49 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to perform unauthorized actions on behalf of an authenticated user.