4961 matches found
WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.9...
WordPress ACL Floating Cart for WooCommerce plugin <= 0.9 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin ACL Floating Cart for WooCommerce versions = 0.9...
WordPress Sunshine Photo Cart Plugin <= 3.2.9 is vulnerable to Broken Access Control
Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.2.9 Fixed in 3.2.10 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-49697 Patch priority Low CVSS severity Low 4.3 Developer WP Sunshine PSID 523fa4ccc0db Credits Trương Hữu Phúc truonghuuphu...
WordPress ACL Floating Cart for WooCommerce Plugin <= 0.9 is vulnerable to Cross Site Scripting (XSS)
Software ACL Floating Cart for WooCommerce Type Plugin Vulnerable versions = 0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49640 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4827b6dd4102 Credits Mika Required...
CVE-2024-47634
Cross-Site Request Forgery CSRF vulnerability in Streamline.Lv CartBounty – Save and recover abandoned carts for WooCommerce allows Cross Site Request Forgery.This issue affects CartBounty – Save and recover abandoned carts for WooCommerce: from n/a through 8.2...
CVE-2024-49296
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...
CVE-2024-49296 WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JC Custom Add to Cart Button Label and Link woo-custom-cart-button allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through = 1.6.1...
CVE-2024-49296
CVE-2024-49296 is a stored XSS vulnerability in the WordPress plugin “Custom Add to Cart Button Label and Link” (affected: versions up to 1.6.1). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public exploit details are not...
CVE-2024-49296 WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Coder426 Custom Add to Cart Button Label and Link allows Stored XSS.This issue affects Custom Add to Cart Button Label and Link: from n/a through 1.6.1...
WordPress plugin Custom Add to Cart Button Label and Link 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
Malicious code in sfly-mobile-cart (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9839 Malicious code in sfly-mobile-cart (npm)
--- -= Per source details. Do not edit below this line.=-...
WordPress Custom Add to Cart Button Label and Link plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Custom Add to Cart Button Label and Link versions = 1.6.1...
Online Eyewear Shop SQL注入漏洞
Online Eyewear Shop is an online eyewear store by the personal developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which stems from the parameter productid in the file classes/Master.php?f=addtocard that can lead to SQL injection...
WordPress Custom Add to Cart Button Label and Link Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Custom Add to Cart Button Label and Link Type Plugin Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49296 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 21931c0098d9 Credits LVT-tholv2k...
WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Sunshine Photo Cart versions = 3.2.8...
CVE-2023-26691
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on...
CVE-2023-26691
Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafted zip file when installing a new add-on...