Reflected XSS Vulnerability in Akıllı Ticaret E-Commerce Pack Product
CVE-2026-12380

6.1MEDIUM

Key Information:

Vendor

Akıllı Ticaret Software Technologies Ltd. Co.

Status
E-commerce Pack
Vendor
CVE Published:
6 October 2026

What is CVE-2026-12380?

The Akıllı Ticaret E-Commerce Pack suffers from a reflected cross-site scripting vulnerability due to improper neutralization of user input during web page generation. This flaw enables attackers to inject malicious scripts, potentially compromising user data and session integrity. While the vendor was notified of this issue, no response was received, leaving users at risk. It is crucial for administrators of affected versions to assess their systems and implement suitable mitigations.

Affected Version(s)

E-Commerce Pack 0 <= 2026-10-06

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Berat ARSLAN
.