Cross-site Scripting Vulnerability in Smart Trade E-Commerce by Akıllı Ticaret Technologies
CVE-2025-8079

4.6MEDIUM

Key Information:

Vendor

Akıllı Ticaret Software Technologies Ltd. Co.

Status
Smart Trade E-commerce
Vendor
CVE Published:
22 September 2025

What is CVE-2025-8079?

A vulnerability has been identified in Smart Trade E-Commerce by Akıllı Ticaret Technologies, where the application allows for reflected cross-site scripting (XSS). This issue enables attackers to inject malicious scripts into web pages viewed by other users, potentially leading to unauthorized access and data manipulation. Users are strongly advised to update to version 4.5.0.0.1 or later to mitigate this security risk.

Affected Version(s)

Smart Trade E-Commerce 0 < 4.5.0.0.1

References

https://www.usom.gov.tr/bildirim/tr-25-0283

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

İrfan TANER
.
CVE-2025-8079 : Cross-site Scripting Vulnerability in Smart Trade E-Commerce by Akıllı Ticaret Technologies