Lucene search

K
patchstackXu-Liang LiaoPATCHSTACK:DCB7B56FC40F4C89E7191B5861637225
HistoryAug 18, 2021 - 12:00 a.m.

WordPress Shopping Cart & eCommerce Store plugin <= 5.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

2021-08-1800:00:00
Xu-Liang Liao
patchstack.com
4

0.001 Low

EPSS

Percentile

41.2%

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Xu-Liang Liao in WordPress Shopping Cart & eCommerce Store plugin (versions <= 5.1.0).

Solution

           Update the WordPress Shopping Cart & eCommerce Store plugin to the latest available version (at least 5.1.1).
CPENameOperatorVersion
wp easycartle5.1.0

0.001 Low

EPSS

Percentile

41.2%

Related for PATCHSTACK:DCB7B56FC40F4C89E7191B5861637225