PT-2023-27702 · Kerawen · Kerawen

Name of the Vulnerable Software and Affected Versions: Kerawen versions prior to 2.5.1 Description: The issue is related to a SQL injection vulnerability. It occurs via the ocs id cart parameter at the KerawenDeliveryModuleFrontController::initContent function. Recommendations: For versions prior...

CVE-2023-46358

In the module "Referral and Affiliation Program" referralbyphone version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate has sensitive SQL calls that can be executed with a trivial ht...

CVE-2023-46358

In the module "Referral and Affiliation Program" referralbyphone version 3.5.1 and before from Snegurka for PrestaShop, a guest can perform SQL injection. Method ReferralByPhoneDefaultModuleFrontController::ajaxProcessCartRuleValidate has sensitive SQL calls that can be executed with a trivial ht...

CVE-2023-44986

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-44986

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-44986

CVE-2023-44986 affects WordPress plugin Abandoned Cart Lite for WooCommerce (Tyche Softwares) version

CVE-2023-44986 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-44986 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

PT-2023-29332

Name of the Vulnerable Software and Affected Versions Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions = 5.15.2 Description The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access can...

WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2023-44986: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

CVE-2023-43148

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

Cross site request forgery (csrf)

SPA-Cart 1.9.0.3 has a Cross Site Request Forgery CSRF vulnerability that allows a remote attacker to delete all accounts...

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

CVE-2023-43149

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

Cross site request forgery (csrf)

SPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery CSRF that allows a remote attacker to add an admin user with role status...

PT-2023-28718 · Spa-Cart · Spa-Cart

Name of the Vulnerable Software and Affected Versions: SPA-Cart version 1.9.0.3 Description: The issue allows a remote attacker to delete all accounts due to a Cross Site Request Forgery CSRF vulnerability. Recommendations: For SPA-Cart version 1.9.0.3, at the moment, there is no information abou...

PT-2023-28719 · Spa-Cart · Spa-Cart

Name of the Vulnerable Software and Affected Versions: SPA-Cart version 1.9.0.3 Description: The issue allows a remote attacker to add an admin user with role status due to Cross Site Request Forgery CSRF. Recommendations: For SPA-Cart version 1.9.0.3, at the moment, there is no information about...