CVE-2026-5218
Medium · 4.3CVSS
4.3
EPSS
—
Published
Aug 27, 2026
CISA due date
—
The record
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Softtr Informatics Technology Trading Limited Company E-Commerce Pack allows Cross-Site Scripting (XSS). This issue affects E-Commerce Pack: before 5.03.01.49.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-52773 YesWiki is a wiki system written in PHP. CWE-80
- CVE-2026-52774 YesWiki is a wiki system written in PHP. CWE-80
- CVE-2026-32773 There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a… CWE-80
- CVE-2026-82838 The default docker image shipped for Venueless did not properly ensure that uploaded SVG… CWE-80
- CVE-2026-55696 PrivateBin is an online pastebin where the server has zero knowledge of pasted data. CWE-80
- CVE-2026-20232 A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE)… CWE-80
- CVE-2026-52854 Maps is a MediaWiki extension that enables visualization of geographic data through… CWE-80
- CVE-2026-75082 A flaw has been found in Webkul Bagisto up to 2.4.4. CWE-80