6078 matches found
CVE-2023-46357
In the module "Cross Selling in Modal Cart" motivationsale 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method motivationsaleDataModel::getProductsByIds has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injectio...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Cross Selling in Modal Cart versions prior to 3.5.0. An attacker...
CVE-2023-46357: Improper Neutralization of Special Elements used in an SQL Command
In the module "Cross Selling in Modal Cart" motivationsale 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The method motivationsaleDataModel::getProductsByIds has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injectio...
Mercedes-Benz Mercedes me Security Breach
Mercedes-Benz Mercedes me is an automotive software from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz Mercedes me v1.34.0 and prior versions that stems from an access control issue that allows an attacker to view another user's shopping cart by sending a crafted add ord...
CVE-2023-47239
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin = 1.1.10 versions...
CVE-2023-47239
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin = 1.1.10 versions...
CVE-2023-47239
CVE-2023-47239 affects the WordPress plugin Scott Paterson Easy PayPal Shopping Cart (versions
Easy PayPal Shopping Cart < 1.1.11 - Contributor+ Stored XSS
Description The plugin does not validate and escape some parameters, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
WordPress Plugin Easy PayPal Shopping Cart Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2023-47239: Improper Neutralization of Input During Web Page Generation
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Scott Paterson Easy PayPal Shopping Cart plugin = 1.1.10 versions...
CVE-2023-46629
Cross-Site Request Forgery CSRF vulnerability in themelocation Remove Add to Cart WooCommerce plugin = 1.4.4...
CVE-2023-46629
CVE-2023-46629: CSRF in the WordPress Remove Add to Cart WooCommerce plugin
PT-2023-30126
Name of the Vulnerable Software and Affected Versions themelocation Remove Add to Cart WooCommerce plugin versions = 1.4.4 Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...
WordPress Plugin Remove Add to Cart WooCommerce Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
CVE-2023-46629: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in themelocation Remove Add to Cart WooCommerce plugin = 1.4.4...
WordPress Ecwid Shopping Cart Plugin <= 6.12.3 is vulnerable to Broken Access Control
Software Ecwid Shopping Cart Type Plugin Vulnerable versions = 6.12.3 Fixed in 6.12.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5cdd0a137b51 Credits Unknown Required privilege...
WordPress Mini Cart Drawer For WooCommerce Plugin <= 4.0.0 is vulnerable to Broken Access Control
Software Mini Cart Drawer For WooCommerce Type Plugin Vulnerable versions = 4.0.0 Fixed in 4.0.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47694 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d5e11a29b0ee Credits Abdi Pranata...
WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)
Software Easy PayPal Shopping Cart Type Plugin Vulnerable versions = 1.1.10 Fixed in 1.1.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47239 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 65426b625654 Credits Ngô Thiên An ancorn from...
