Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affe…

Medium CVSS 6.1

CVECVE-2026-7298

First seen2026-09-25 16:31 UTC

Disclosed2026-09-11 18:16 UTC

Last updated2026-09-25 16:31 UTC

Channel statusauto

Summary

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1084

Timeline

2026-09-25 nvd_ingest NVD