PT-2026-22139 · Dokuzsoft Technology · E-Commerce Product

Ferit Özner · Published 2026-02-26 · Updated 2026-06-04 · CVE-2025-14343

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Dokuzsoft Technology Ltd. E-Commerce Product versions through 10122025

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Reflected Cross-site Scripting (XSS) condition. The issue allows for the execution of malicious scripts through web pages. The vulnerable product is developed by Dokuzsoft Technology Ltd.Şti.

Recommendations Versions prior to 10122025 should be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-14343

Affected Products

E-Commerce Product

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-14343 · Security Note
• https://twitter.com/cracbot/status/2028787659733442616 · Twitter Post
• https://twitter.com/CVEnew/status/2027004179131089040 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0083 · Note
• https://t.me/CVEtracker/45845 · Telegram Post
• https://twitter.com/FeritOzner/status/2027006230351237220 · Twitter Post
• https://t.me/cveNotify/153304 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0083 · Note
• https://t.me/cveNotify/165930 · Telegram Post