Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS). This issue affects E-Commerce Package: through 27112025.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-13002 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Pack… https://www.cve.org/CVERecord?id=CVE-2025-13002
Post summary
The post merely lists the CVE identifier, its general type (XSS), and a link to the CVE record, without providing actionable or detailed information.
🟠 CVE-2025-13002 - High Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scr... https://www.thehackerwire.com/vulnerability/CVE-2025-13002/ https://t.co/bwzron4HEw
Post summary
The post announces the discovery of a high‑severity XSS vulnerability (CVE‑2025‑13002) in Farktor’s e‑commerce package, providing a brief technical description but no PoC, exploit code, active exploitation evidence, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | farktor | e-commerce_package | - | - | - |