Lucene search
HauntITPATCHSTACK:20846F313D731131F8BE932FA8FD4F0FHistoryJan 13, 2015 - 12:00 a.m.
WordPress Welcart e-Commerce Plugin <= 1.3.12 - Multiple XSS
2015-01-1300:00:00
HauntIT
patchstack.com
5
0.002 Low
EPSS
Percentile
59.7%
Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML in an add_delivery_method action to wp-admin/admin-ajax.php via 4 parameters: “name”, “intl”, “nocod”, or “time parameter”.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| foliopress wysiwyg | le | 1.3.12 |
Related
cve
cve
CVE-2014-10016
2015-01-13 11:59:24
nvd
nvd
CVE-2014-10016
2015-01-13 11:59:24
prion
prion
Cross site scripting
2015-01-13 11:59:00
cvelist
cvelist
CVE-2014-10016
2015-01-13 11:00:00
wpvulndb
wpvulndb
Welcart e-Commerce 1.3.12 - purchase_limit Parameter DOM-based XSS
2014-08-01 00:00:00