CVE-2026-12380 — Reflected XSS in Akıllı Ticaret's E-Commerce Pack

CVE-2026-12380

Reflected XSS in Akıllı Ticaret's E-Commerce Pack PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
Akıllı Ticaret Software Technologies Ltd. Co. / E-Commerce Pack	affected 0 through 2026-10-06

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1256

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.