Skip to content
OpenAdvisories
High · 8.8 CVE-2026-3953 EUVD-2026-28349GHSA-p86h-jj99-f63w

Reflected XSS in Gosoft Software's Proticaret E-Commerce

Published May 7, 2026 · Updated May 7, 2026 · Assigned by TR-CERT

Vendor: Gosoft Software Industry and Trade Ltd. Co. Product: Proticaret E-Commerce

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gosoft Software Industry and Trade Ltd. Co. Proticaret E-Commerce allows Cross-Site Scripting (XSS), Reflected XSS.

This issue affects Proticaret E-Commerce: from v5.0.0 before V 6.0.1767.1383.

Affected products

VendorProductAffectedFixed
Gosoft Software Industry and Trade Ltd. Co. Proticaret E-Commerce v5.0.0 – < V 6.0.1767.1383 V 6.0.1767.1383

References