Skip to content
OpenAdvisories
High · 8.2 CVE-2025-13002 EUVD-2025-207404GHSA-cmjp-m265-83j5

XSS in Farktor Software's E-Commerce Package

Published Feb 12, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).

This issue affects E-Commerce Package: through 27112025.

Affected products

VendorProductAffectedFixed
Farktor Software E-Commerce Services E-Commerce Package ≤ 27112025 —

References