PT-2019-8453

Name of the Vulnerable Software and Affected Versions customer-area plugin versions prior to 7.4.3 Description The issue affects the admin pages of the customer-area plugin, allowing for XSS attacks. Recommendations For versions prior to 7.4.3, update to version 7.4.3 or later to resolve the issu...

CVE-2017-18519: Improper Neutralization of Input During Web Page Generation

The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages...

WordPress WP Customer Area Plugin <= 7.4.2 - Reflected Cross Site Scripting vulnerability

The value of $REQUEST‘page’ parameter is not escaped in the template files - /src/php/core-addons/admin-area/templates/. This allows an attacker to execute a reflected cross site scripting attack. The vulnerability was fixed in version 7.4.3. Solution Update the plugin...

Customer Area < 7.4.3 - XSS

The WP Customer Area WordPress plugin was affected by a XSS security vulnerability...

AlegroCart 1.2.8 SQL Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: AlegroCart 1.2.8 Fixed in: Patch AC128fix17102015 Path Link: http://forum.alegrocart.com/download/file.php?id=1040 Vendor Website: http://alegrocart.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 level, 2 position, 3 id, and 4 action parameters to membersonly/index.cgi, and the 5 page parameter to customerarea/index.cgi...