<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: e-commerce package</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-13004: Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc</title><link>https://patchthecve.com/cve/CVE-2025-13004.html</link><guid>https://patchthecve.com/cve/CVE-2025-13004.html</guid><pubDate>Wed, 17 Jun 2026 08:33:20 +0000</pubDate><description>MEDIUM 6.3: Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Manipulating User-Controlled Variables.

This issue affects E-Commerce Package: through 27112025.</description></item><item><title>CVE-2025-13002: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in F</title><link>https://patchthecve.com/cve/CVE-2025-13002.html</link><guid>https://patchthecve.com/cve/CVE-2025-13002.html</guid><pubDate>Wed, 17 Jun 2026 08:33:20 +0000</pubDate><description>HIGH 8.2: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Cross-Site Scripting (XSS).

This issue affects E-Commerce Package: through 27112025.</description></item><item><title>CVE-2025-10969: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Farktor </title><link>https://patchthecve.com/cve/CVE-2025-10969.html</link><guid>https://patchthecve.com/cve/CVE-2025-10969.html</guid><pubDate>Wed, 17 Jun 2026 08:29:22 +0000</pubDate><description>CRITICAL 9.8: Improper Neutralization of Special Elements used in an SQL Command (&#x27;SQL Injection&#x27;) vulnerability in Farktor Software E-Commerce Services Inc. E-Commerce Package allows Blind SQL Injection.

This issue affects E-Commerce Package: through 27112025.</description></item></channel></rss>