CVE-2024-0678: Improper Neutralization of Input During Web Page Generation

The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

PT-2024-15742

Name of the Vulnerable Software and Affected Versions Order Delivery Date for WP e-Commerce plugin for WordPress versions up to, and including, 1.2 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticat...