CVE-2026-120597

The Welcart e-Commerce Plugin for WordPress (versions up to 2.12.6 ) is vulnerable to a remote cross-site scripting (XSS) attack. The issue originates from the ESCOTT_MAIN::error_page_message function within the classes/paymentESCOTT.main.class.php file, where the ResponseCd argument is improperl...

CVE-2026-120597: Welcart e-Commerce Plugin: A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress

A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTTMAIN::errorpagemessage of the file classes/paymentESCOTT.main.class.php. Such manipulation of the argument ResponseCd leads to cross site scripting. The attack can be launched...

PT-2026-135829

A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT MAIN::error page message of the file classes/paymentESCOTT.main.class.php. Such manipulation of the argument ResponseCd leads to cross site scripting. The attack can be launched...