CVE-2026-12380

Name of the Vulnerable Software and Affected Versions E-Commerce Pack versions prior to 2026-10-06

Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting (XSS), a flaw where an application includes untrusted data in a web page without proper validation or encoding, enabling the execution of malicious scripts in the victim's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.