CVE-2026-3953 is a high-severity reflected Cross-Site Scripting (XSS) vulnerability in Proticaret E-Commerce software by Gosoft Software Industry and Trade Ltd. Co. It affects versions from 5.0.0 up to but not including 6.0.1767.1383. The vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that can compromise confidentiality, integrity, and availability.