PT-2026-7841 · Farktor Software E Commerce Services · E-Commerce Package

Berat Arslan · Published 2026-02-12 · Updated 2026-02-12 · CVE-2025-13002

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Farktor Software E-Commerce Services Inc. E-Commerce Package versions through 27112025

Description An Improper Neutralization of Input During Web Page Generation issue exists in Farktor Software E-Commerce Services Inc. E-Commerce Package, allowing for Cross-Site Scripting (XSS). This allows attackers to inject malicious scripts into web pages viewed by other users. XSS occurs when a web application accepts user-supplied data and includes it in a web page without properly validating or encoding it. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser.

Recommendations Versions through 27112025 should be updated or patched to address this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-13002

Affected Products

E-Commerce Package

References · 5

• https://osv.dev/vulnerability/CVE-2025-13002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13002 · Security Note
• https://t.me/cveNotify/151832 · Telegram Post
• https://usom.gov.tr/bildirim/tr-26-0063 · Note
• https://t.me/CVEtracker/44527 · Telegram Post