Medium severity4.3NVD Advisory· Published Aug 27, 2026

CVE-2026-5218

Description

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS).

This issue affects E-Commerce Pack: before 5.03.01.49.

Affected products

WordPress/Ecommerce Packinferred
Range: <5.03.01.49
Package: https://wordpress.org/plugins/ecommerce-pack
Softtr Informatics Technology Trading Limited Company/E-Commerce Packllm-create
Range: <5.03.01.49

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0918nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000