Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-5218 EUVD-2026-67002GHSA-r36g-rq7m-r9rf

HTML Injection in Softtr's E-Commerce Pack

Published Aug 27, 2026 · Updated Aug 27, 2026 · Assigned by TR-CERT

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS).

This issue affects E-Commerce Pack: before 5.03.01.49.

Affected products

VendorProductAffectedFixed
Softtr Informatics Technology Trading Limited Company E-Commerce Pack < 5.03.01.49 5.03.01.49

References