Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-7298 EUVD-2026-76163GHSA-36gg-9rj4-8rgf

Reflected XSS in IdeaSoft's Smart E-Commerce

Published Sep 11, 2026 · Updated Sep 25, 2026 · Assigned by TR-CERT

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS.

This issue affects Smart E-Commerce: before 8.4.2.0.

Affected products

VendorProductAffectedFixed
IdeaSoft Software Industry and Trade Smart E-Commerce < 8.4.2.0 8.4.2.0

References