E Commerce Platform
Monthly
Reflected XSS in Dayneks Software Industry and Trade Inc.'s E-Commerce Platform (all versions through 28082026) allows unauthenticated remote attackers to inject and execute malicious scripts in victim browsers by delivering crafted URLs. The vulnerability, rooted in CWE-79 unsanitized input reflection, enables session hijacking, credential theft, or malicious redirection within the e-commerce site's origin context. No vendor patch is available; the vendor did not respond to TR-CERT's coordinated disclosure, leaving operators without an official remediation path.
Reflected XSS in Dayneks Software Industry and Trade Inc.'s E-Commerce Platform (all versions through 28082026) allows unauthenticated remote attackers to inject and execute malicious scripts in victim browsers by delivering crafted URLs. The vulnerability, rooted in CWE-79 unsanitized input reflection, enables session hijacking, credential theft, or malicious redirection within the e-commerce site's origin context. No vendor patch is available; the vendor did not respond to TR-CERT's coordinated disclosure, leaving operators without an official remediation path.