Medium 6.1

Improper neutralization of input during web page generation ('cross-site scripting')...

CVE-2026-18205 First seen on SecPulse Oct 20, 21:17

Original description The description as published by the source.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS.

This issue affects Ticimax E-Commerce Platform: through 2026-10-20.

Source: NIST National Vulnerability Database NVD GitHub Advisory

References

web iletisim@usom.gov.tr
web nvd.nist.gov
web github.com

Key facts

CVSS v3: Medium 6.1; CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published: Oct 20, 2026
First seen on SecPulse: Oct 20, 21:17
GHSA: GHSA-mxqg-9cg3-gj36
CWE: CWE-79

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Cross-Site Scripting

CWE

Cwe 79

Detection sources

NIST National Vulnerability Database01:17
GitHub Security Advisories (Global)Oct 20, 21:31