CVE-2024-12622

creationtimestamp| type| source ---|---|--- 2024-12-24 05:43:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113706203946762939 2024-12-24 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa52ir422 2024-12-24 07:42:43+00:00| seen|...

CVE-2024-12622 WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpcartbutton' and 'wpcartdisplayproduct' shortcodes in all versions up to, and including, 5.0.7 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-12622

CVE-2024-12622 refers to a Stored XSS vulnerability in the WordPress Simple Shopping Cart plugin. The issue affects all versions up to 5.0.7 and arises from insufficient input sanitization and output escaping in the plugin’s wp_cart_button and wp_cart_display_product shortcodes, allowing an authe...