Skip to content
OpenAdvisories
High · 7.6 CVE-2025-14343 EUVD-2025-208120GHSA-j28w-j889-vwc6

Reflected XSS in Dokuzsoft Technology's E-Commerce Product

Published Feb 26, 2026 · Updated Jun 4, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology Ltd. E-Commerce Product allows Reflected XSS.

This issue affects E-Commerce Product: through 10122025.

Affected products

VendorProductAffectedFixed
Dokuzsoft Technology E-Commerce Product ≤ 10122025 —

References