TI-2025-07392 Aliases CVE-2025-8079 GHSA-fpc6-88jw-g93x

Reflected XSS in Akıllı Ticaret Software Technologies' Smart Trade E-Commerce

LOW 21CWE-79Published 2025-09-22 · Updated 2026-06-05

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS. This issue affects Smart Trade E-Commerce: before 4.5.0.0.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00243 15th percentileScored 2026-11-07

Fix Fixed Smart Trade E-Commerce (Akıllı Ticaret Software Technologies Ltd. Co.): 4.5.0.0.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Akıllı Ticaret Software Technologies Ltd. Co.	Smart Trade E-Commerce	before 4.5.0.0.1	4.5.0.0.1	Patch available	CNA

Smart Trade E-Commerce VendorAkıllı Ticaret Software Technologies Ltd. Co. Affected before 4.5.0.0.1 Fixed in 4.5.0.0.1 Patch available CNA

Remediation

Fix · CNA Smart Trade E-Commerce (Akıllı Ticaret Software Technologies Ltd. Co.) Fixed in 4.5.0.0.1

Timeline

2026-10-02 Threatist record created from CVE-2025-8079
2026-10-03 Alias added: GHSA-fpc6-88jw-g93x

References

Other 2

TI-2026-68433 Reflected XSS in Akıllı Ticaret's E-Commerce Pack CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences