CVE-2025-8079

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. Smart Trade E-Commerce allows Reflected XSS. This issue affects Smart Trade E-Commerce: before 4.5.0.0.1.

• CWE-79

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0283
• https://www.usom.gov.tr/bildirim/tr-25-0283

Published

Sep 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8073The Dynamic AJAX Product Filters for WooCommerce plugin for …6.4
• CVE-2025-8074Origin validation error vulnerability in BeeDrive in Synolog…5.6
• CVE-2025-8075Cybersecurity Nozomi Networks Labs, a specialized security c…5.4
• CVE-2025-8076There is a vulnerability in the Supermicro BMC web function …7.2
• CVE-2025-8077A vulnerability exists in NeuVector versions up to and inclu…9.8
• CVE-2025-8078A post-authentication command injection vulnerability in Zyx…7.2
• CVE-2025-8080The Alobaidi Captcha plugin for WordPress is vulnerable to S…4.4
• CVE-2025-8081The Elementor plugin for WordPress is vulnerable to Arbitrar…4.9
• CVE-2025-8082Improper neutralization of the title date in the 'VDatePicke…6.3
• CVE-2025-8083The Preset configuration https://v2.vuetifyjs.com/en/featur…8.6
• CVE-2025-8084The AI Engine plugin for WordPress is vulnerable to Server-S…6.8
• CVE-2025-8085The Ditty WordPress plugin before 3.1.58 lacks authorizatio…8.6