Live › vulnerability › CVE-2026-18205
Go to dashboardTicimax E-Commerce Platform does not neutralize some input when generating web pages, enabling reflected cross-site scripting. An attacker who gets a user to open a crafted link can run script in that user's browser session on the store.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Stores running the Ticimax E-Commerce Platform, through 2026-09-02 according to the NVD entry. The sources do not list affected versions or the vulnerable pages, so the team should confirm with the vendor whether their hosted store is affected. Stores on the hosted platform are patched or not by the vendor rather than by the store team.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS.
This issue affects Ticimax E-Commerce Platform: through 2026-09-02.
This page as .md · .json · in your agent: get_signal("CVE-2026-18205")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.