Cross-Site Scripting Vulnerability in Ticimax E-Commerce Platform by Ticimax Informatics Technologies Inc.
CVE-2026-18205

6.1MEDIUM

Key Information:

Vendor

Ticimax Informatics Technologies Inc.

Status
Ticimax E-commerce Platform
Vendor
CVE Published:
20 October 2026

What is CVE-2026-18205?

A reflected cross-site scripting (XSS) vulnerability exists in the Ticimax E-Commerce Platform, allowing attackers to inject malicious scripts into web pages that are then executed in the context of users' browsers. This can enable unauthorized actions and data theft, exposing sensitive user information. This issue necessitates prompt attention to safeguard users from potential exploitations.

Affected Version(s)

Ticimax E-Commerce Platform 0 <= 2026-10-20

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ali Murat Tava
Borusan Otomotiv
.