Medium · 5.4 CVE-2026-4378 EUVD-2026-67740GHSA-qrv9-chvw-2j38

Stored XSS in Akıllı Ticaret's E-Commerce Pack

Published Aug 28, 2026 · Updated Sep 2, 2026 · Assigned by TR-CERT

Vendor: Akıllı Ticaret Software Technologies Ltd. Co. Product: E-Commerce Pack

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS.

This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.

Affected products

Vendor	Product	Affected	Fixed
Akilli Ticaret Software Technologies	E-Commerce Pack	4.5.001 – < 4.6.001	4.6.001

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0944 government-resource