Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.1%	CVE-2026-12380E-Commerce Pack · cross-site scripting Medium6.1EPSS 0.1%2026-10-06CVE Database V5CVE-2026-12380 CVE-2026-12380 is a reflected cross-site scripting (XSS) vulnerability in Akıllı Ticaret Software Technologies Ltd. Co.'s E-Commerce Pack. It arises from improper neutralization of input during web page generation. The vulnerability affects versions up to and including 2026-10-06. The vendor was contacted but did not respond regarding this issue. The CVSS v3.1 score is 6.1, indicating a medium severity risk. EPSS 0.1%Vulnerability Akıllı Ticaret Software Technologies Ltd. Co.#cwe-79	CVE Database V5	2026-10-06
Medium	4.6	EPSS 0.2%	CVE-2025-8079Smart Trade E-Commerce · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium4.6EPSS 0.2%2025-09-22CVE Database V5CVE-2025-8079 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS. This issue affects Smart Trade E-Commerce: before 4.5.0.0.1. EPSS 0.2%Vulnerability Akıllı Ticaret Software Technologies Ltd. Co.#cwe-79	CVE Database V5	2025-09-22

Showing 1–3 of 3 results · 1 duplicate CVE record merged