Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affe…

中危 CVSS 6.1

CVECVE-2026-7298

首次发现2026-09-25 16:31 UTC

披露时间2026-09-11 18:16 UTC

最后更新2026-09-25 16:31 UTC

通道状态auto

摘要

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in IdeaSoft Software Industry and Trade Inc. Smart E-Commerce allows Reflected XSS. This issue affects Smart E-Commerce: before 8.4.2.0.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1084

时间线

2026-09-25 nvd_ingest NVD