WordPress Welcart e-Commerce plugin <= 2.8.3 - Auth. Arbitrary Shipping Method Creation/Update/Deletion vulnerability

Auth. Arbitrary Shipping Method Creation/Update/Deletion vulnerability discovered by Lana Codes in WordPress Welcart e-Commerce plugin versions = 2.8.3. Solution Update the WordPress Welcart e-Commerce plugin to the latest available version at least 2.8.4...

Malicious code in commerce-sdk-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b493faaa84a8ccd6bcc5a53210a270e361868038633326c140d91f6ef9fce23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2121 Malicious code in commerce-sdk-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b493faaa84a8ccd6bcc5a53210a270e361868038633326c140d91f6ef9fce23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects the Commerce module before 4.0.8 from Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

GHSA-WJFM-QXG2-Q679 Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects the Commerce module before 4.0.8 from Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

CVE-2022-42119

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

Cross site scripting

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

CVE-2022-42119

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

CVE-2022-42119

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

CVE-2022-42119

Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8...

PT-2022-26264 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.5 through 7.4.2 Liferay DXP 7.3 before update 8 Description: Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. Recommendations: For Liferay Portal versions 7.3.5 through...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

ShopWind Cross-Site Scripting Vulnerability

ShopWind is a Chinese ShopWind company based on the Yii2.0 framework of the depth of the reconstruction of the B2B2C, O2O industry e-commerce system software. A cross-site scripting vulnerability exists in ShopWind v3.4.3, which stems from the lack of effective filtering and escaping of...

OpenCart SQL Injection Vulnerability (CNVD-2024-30068)

OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart 3.0.3.7 version of the existence of SQL injection vulnerability , an attacker can exploit the vulnerability...

CVE-2022-38656 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...

CVE-2022-38656 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes...

CVE-2022-38656

CVE-2022-38656 relates to HCL Commerce when used with Elasticsearch. The vulnerability could allow a remote attacker to cause a denial of service and to make administrative changes on the site. Affected software is HCL Commerce integrated with Elasticsearch; the underlying root cause is not expli...

PT-2022-24506 · Elastic +1 · Elasticsearch +1

Name of the Vulnerable Software and Affected Versions: HCL Commerce affected versions not specified Description: The issue allows a remote attacker to cause a denial of service attack on the site and make administrative changes when HCL Commerce is used with Elasticsearch. Recommendations: At the...

Chrome Extensions Harboring Dormant Colors Malware Infect Over a Million PCs

By Waqas Among other capabilities, Dormant Colors malware can also inject ads into standard pages and append affiliate links to e-commerce websites to generate affiliate revenue. This is a post from HackRead.com Read the original post: Chrome Extensions Harboring Dormant Colors Malware Infect Ove...

Adobe Commerce Input Validation Error Vulnerability (CNVD-2024-25611)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an input validation error vulnerability that stems from incorrect input validation. An authenticated attacker can trigger an insecure...