Skip to content
OpenAdvisories
High · 7.1 CVE-2025-8411 EUVD-2025-29713GHSA-f7cc-9jjr-586q

XSS in Dokuzsoft Technology's E-Commerce Web Design Product

Published Sep 17, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers.

This issue affects E-Commerce Web Design Product: before 11.08.2025.

Affected products

VendorProductAffectedFixed
Dokuzsoft Technology E-Commerce Web Design Product < 11.08.2025 11.08.2025

References