CVE-2026-4378: Akilli Ticaret Software Technologies Ltd E-Commerce Pack

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 before 4.6.001.

Affected products

• Akilli Ticaret Software Technologies Ltd E-Commerce Pack: from 4.5.001, before 4.6.001 (fixed in 4.6.001)

Published 2026-08-28. Last modified 2026-09-02.