PT-2023-12527 · WordPress · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart plugin for WordPress versions up to, and including, 2.8.28 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the sunshine products quicksave post function. This...

CVE-2021-4415: Cross-Site Request Forgery (CSRF)

The Sunshine Photo Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.28 This is due to missing or incorrect nonce validation on the sunshineproductsquicksavepost function. This makes it possible for unauthenticated attackers to save custom...

CVE-2022-40692

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

CVE-2022-40692

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

CVE-2022-40692 WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

CVE-2022-40692 WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

CVE-2022-40692

CVE-2022-40692 – WP Sunshine Sunshine Photo Cart : A CSRF vulnerability affects plugin versions ≤ 2.9.13. The reported impact per sources includes high risk in CVSS terms (NVD: 8.8) with potential impact to confidentiality, integrity, and availability; other assessments cite moderate to high impa...

PT-2023-13891 · WordPress · Wp Sunshine Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: WP Sunshine Sunshine Photo Cart plugin versions 2.9.13 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

WordPress Plugin Sunshine Photo Cart 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2022-40692: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WP Sunshine Sunshine Photo Cart plugin = 2.9.13 versions...

CVE-2022-4301

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4301

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

Cross site scripting

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4301

CVE-2022-4301 affects the Sunshine Photo Cart WordPress plugin prior to 2.9.15. The vulnerability is a reflected cross-site scripting flaw caused by failing to sanitize and escape a parameter before it is output on the page. The issue is documented in multiple sources (NVD/Nuclei template, RH Red...

CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2022-4301: Undefined Security Weakness

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

PT-2023-7911 · WordPress · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: Sunshine Photo Cart WordPress plugin versions prior to 2.9.15 Description: The issue is related to the Sunshine Photo Cart WordPress plugin, which does not properly sanitise and escape a parameter before outputting it back in the page. This...

WordPress Plugin Sunshine Photo Cart 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...