CVE-2016-0765

Multiple cross-site scripting XSS vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 action parameter...

CVE-2016-0765

Multiple cross-site scripting XSS vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 action parameter...

CVE-2016-0765

The CVE-2016-0765 entry describes multiple XSS vulnerabilities in eshop-orders.php within the WordPress eShop plugin, version 6.3.14. The issue allows remote attackers to inject arbitrary script/HTML via the page or action parameters, indicating a reflected or stored XSS vector in the eshop-order...