CVE-2026-4378 — Stored XSS in Akıllı Ticaret's E-Commerce Pack

CVE-2026-4378

Stored XSS in Akıllı Ticaret's E-Commerce Pack PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.

Affected (CNA)

Vendor / product	Versions
Akilli Ticaret Software Technologies Ltd. / E-Commerce Pack	affected 4.5.001 before 4.6.001

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0944

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.