CVE-2026-5218
Received Received - Intake

Basic XSS in E-Commerce Pack

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS). This issue affects E-Commerce Pack: before 5.03.01.49.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-5218
EUVD
EUVD-2026-67002

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
softtr_informatics_technology_trading_limited_company e-commerce_pack to 5.03.01.49 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-80 The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a basic Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of script-related HTML tags in the E-Commerce Pack software. It allows attackers to inject malicious scripts into web pages viewed by other users.

Detection Guidance

To detect this XSS vulnerability in Softtr E-Commerce Pack, inspect web pages for improperly neutralized HTML tags. Check input fields and URL parameters for script injection attempts. Use tools like OWASP ZAP or Burp Suite to scan for reflected/stored XSS. Manually test by injecting basic XSS payloads such as <script>alert(1)</script> in input fields.

Impact Analysis

An attacker could exploit this to steal user sessions, deface websites, or perform actions on behalf of users. Users might unknowingly execute malicious scripts when visiting affected pages.

Compliance Impact

This XSS vulnerability could lead to unauthorized data access or modification, potentially violating GDPR (data protection) and HIPAA (health data privacy) requirements for secure web applications.

Mitigation Strategies

Update E-Commerce Pack to version 5.03.01.49 or later to address the XSS vulnerability. Review and sanitize all user inputs to prevent script injection. Implement a web application firewall to filter malicious scripts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-5218. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart