CVE-2026-4378
Stored XSS in Akıllı Ticaret's E-Commerce Pack
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-79 |
| Vendor | akilli ticaret software technologies ltd. |
| Product | e-commerce pack |
| Published | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for akilli ticaret software technologies ltd. e-commerce pack
Be the first to know when new medium vulnerabilities affecting akilli ticaret software technologies ltd. e-commerce pack are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Akilli Ticaret Software Technologies Ltd. / E-Commerce Pack
4.5.001 ≤ 28082026
References
Credits
Mehmet Barış ÜRESİN