CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2017-18572

CVE-2017-18572 affects the WordPress GNUCommerce plugin prior to version 1.4.2. The issue is an XSS vulnerability in the plugin (gnucommerce) that can allow execution of client-side code, as described in multiple sources (including Red Hat and CNVD/NVD records). The vulnerability arises in the gn...