E-commerce Pack CVEs and Security Vulnerabilities

CVE-2026-12380

Reflected XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Akilli Commerce Software Technologies Ltd. Co.

Products

E-commerce Pack

CVE-2026-4378

Stored XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed