Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00013.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Farktor
  • E-commerce Package
Farktor Software E-commerce Services Inc.
  • E-commerce Package

Configuration 1 [-]

cpe:2.3:a:farktor:e-commerce_package:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Farktor Software E-commerce Services Inc.
  • E-commerce Package
References
Link Providers
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0063 cve-icon cve-icon
https://www.usom.gov.tr/bildirim/tr-26-0063 cve-icon cve-icon
History

Thu, 04 Jun 2026 08:45:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).This issue affects E-Commerce Package: through 27112025. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.
References

Tue, 10 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Farktor
Farktor e-commerce Package
CPEs cpe:2.3:a:farktor:e-commerce_package:*:*:*:*:*:*:*:*
Vendors & Products Farktor
Farktor e-commerce Package

Fri, 13 Feb 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Farktor Software E-commerce Services Inc.
Farktor Software E-commerce Services Inc. e-commerce Package
Vendors & Products Farktor Software E-commerce Services Inc.
Farktor Software E-commerce Services Inc. e-commerce Package

Thu, 12 Feb 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Feb 2026 13:30:00 +0000

Type Values Removed Values Added
Description Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).This issue affects E-Commerce Package: through 27112025.
Title XSS in Farktor Software's E-Commerce Package
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published:

Updated: 2026-06-04T07:05:44.869Z

Reserved: 2025-11-11T12:53:06.118Z

Link: CVE-2025-13002

cve-icon Vulnrichment

Updated: 2026-02-12T14:34:16.629Z

cve-icon NVD

Status : Modified

Published: 2026-02-12T14:16:00.710

Modified: 2026-06-04T09:16:28.230

Link: CVE-2025-13002

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-02-13T21:35:40Z