A vulnerability categorized as problematic has been discovered in Web-Ofisi E-Ticaret 4.0. This affects an unknown function of the component GET Parameter Handler. The manipulation of the argument urun results in cross site scripting.

This vulnerability is reported as CVE-2018-25210. The attack can be launched remotely. Moreover, an exploit is present.