Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-6122 EUVD-2023-58377GHSA-427f-qf2r-ffq3

Reflected XSS in Softomi E-commerce Software

Published Dec 21, 2023 · Updated May 20, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı allows Reflected XSS.

This issue affects Softomi Gelişmiş C2C Pazaryeri Yazılımı: before 12122023.

Affected products

VendorProductAffectedFixed
İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı < 12122023 12122023

References