CVE-2026-5800: Reflected XSS in Dayneks Software's E-Commerce Platform

Q: What does an attacker need to exploit this issue?

The vulnerability is network-accessible, requires no privileges, and has low attack complexity. Exploitation does require user interaction, meaning a victim must be induced to visit or interact with a crafted request or page.

Q: What impact could successful exploitation have?

Successful reflected XSS can expose limited confidentiality and integrity within the affected web context. The supplied vector indicates no direct availability impact.

Q: Which releases are affected?

The issue affects Dayneks Software Industry and Trade Inc. E-Commerce Platform through 28082026. No fixed version or vendor response is identified in the provided information.

Published Aug 28, 2026

Updated

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS.

This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Dayneks Software Industry and Trade Inc. E-Commerce Platform<=28082026

Event History

Aug 28, 2026

CVE Published

via MITRE·01:58 PM

Data Sourced

via MITRE·01:58 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is network-accessible, requires no privileges, and has low attack complexity. Exploitation does require user interaction, meaning a victim must be induced to visit or interact with a crafted request or page.

What impact could successful exploitation have?

Successful reflected XSS can expose limited confidentiality and integrity within the affected web context. The supplied vector indicates no direct availability impact.

Which releases are affected?