PT-2012-2184

Name of the Vulnerable Software and Affected Versions TheCartPress plugin for WordPress versions prior to 1.1.6 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the tcp name post XXXXX parameter in the...

CVE-2011-5207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcpnamepostXXXXX parameter...