High severity8.2NVD Advisory· Published Feb 12, 2026· Updated Jun 4, 2026
CVE-2025-13002
CVE-2025-13002
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).
This issue affects E-Commerce Package: through 27112025.
Affected products
3cpe:2.3:a:farktor:e-commerce_package:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:farktor:e-commerce_package:*:*:*:*:*:*:*:*range: <=2025-11-27
- (no CPE)range: <=27112025
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.usom.gov.tr/bildirim/tr-26-0063nvdThird Party Advisory
- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0063nvd
News mentions
0No linked articles in our index yet.