CVE-2026-18205: XSS in Ticimax Informatics' Ticimax E-Commerce Platform
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS.
This issue affects Ticimax E-Commerce Platform: through 2026-09-02.
Other sources
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Reflected XSS.
This issue affects Ticimax E-Commerce Platform: through 2026-10-20.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The issue is remotely reachable and requires no privileges, but it requires user interaction. An attacker would need to cause a user to interact with a crafted request or page that triggers the reflected XSS payload.
What is the potential impact if exploitation succeeds?
Successful exploitation can affect confidentiality and integrity at a low level, with impact extending beyond the initially vulnerable security authority. No availability impact is indicated.
Which versions should be treated as affected?
The affected range is reported as Ticimax E-Commerce Platform versions through 2026-10-20. The provided information does not identify a fixed version.