一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月7日

CVE-2026-12380 [MEDIUM] – Improper neutralization of input during web page generation (‘cross-site scripting’) vulne

未分类
📑 文章目录

Improper neutralization of input during web page generation (‘cross-site scripting’) vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS.

This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.