Cross-Site Request Forgery Vulnerability in Softtr E-Commerce Pack
CVE-2026-5219

8.3HIGH

Key Information:

Vendor

Softtr Information Technology Trade Ltd. Co.

Status
E-commerce Pack
Vendor
CVE Published:
30 July 2026

What is CVE-2026-5219?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the E-Commerce Pack by Softtr Information Technology Trade Ltd. Co., potentially allowing an attacker to perform unauthorized actions on behalf of an authenticated user. This flaw can be exploited if proper validation measures against CSRF are not implemented, leading to unauthorized transactions or changes within the application. Users and administrators are urged to implement security best practices to mitigate the risk associated with this vulnerability.

Affected Version(s)

E-Commerce Pack 0 <= 30072026

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Akıner KISA
.