CVE-2024-50463

CVE-2024-50463 describes an Open Redirect in the WP Sunshine Sunshine Photo Cart plugin (v

PT-2024-34239 · WordPress · Wp Sunshine Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart versions 3.2.9 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This means that the software may redirect users to untrusted...

WordPress plugin Sunshine Photo Cart 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.9...

WordPress Sunshine Photo Cart Plugin <= 3.2.9 is vulnerable to Open Redirection

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.11 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2024-50463 Patch priority Low CVSS severity Low 4.7 Developer WP Sunshine PSID 2d6f2e33d0d9 Credits Muhamad Agil Fachrian Require...

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.9...

WordPress ACL Floating Cart for WooCommerce plugin <= 0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin ACL Floating Cart for WooCommerce versions = 0.9...

WordPress Sunshine Photo Cart Plugin <= 3.2.9 is vulnerable to Broken Access Control

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49697 Patch priority Low CVSS severity Low 4.3 Developer WP Sunshine PSID 523fa4ccc0db Credits Trương Hữu Phúc truonghuuphu...

WordPress ACL Floating Cart for WooCommerce Plugin <= 0.9 is vulnerable to Cross Site Scripting (XSS)

Software ACL Floating Cart for WooCommerce Type Plugin Vulnerable versions = 0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49640 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4827b6dd4102 Credits Mika Required...

CVE-2024-47634

Cross-Site Request Forgery CSRF vulnerability in Streamline.Lv CartBounty – Save and recover abandoned carts for WooCommerce allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through 8.2...

CVE-2024-49296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...

CVE-2024-49296 WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...

CVE-2024-49296 WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Coder426 Custom Add to Cart Button Label and Link allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through 1.6.1...

CVE-2024-49296

CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...

WordPress plugin Custom Add to Cart Button Label and Link 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

Malicious code in sfly-mobile-cart (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9839 Malicious code in sfly-mobile-cart (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Custom Add to Cart Button Label and Link versions = 1.6.1...

WordPress Custom Add to Cart Button Label and Link Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)

Software Custom Add to Cart Button Label and Link Type Plugin Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49296 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 21931c0098d9 Credits LVT-tholv2k...

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the personal developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which stems from the parameter productid in the file classes/Master.php?f=addtocard that can lead to SQL injection...