CVE-2026-19914

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2026-19914

Welcart e-Commerce (WordPress plugin) has a Stored Cross-Site Scripting vulnerability via the custom_order parameter , affecting all versions up to and including 2.12.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject arbitrary scripts...

EUVD-2026-68997

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

CVE-2026-19914 Welcart e-Commerce <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

oss-oopssec-store

OSS - OopsSec Store An intentionally vulnerable e-commerce app for learning web security. Master real-world attack vectors through a realistic CTF platform. Hunt for flags, exploit vulnerabilities, and level up your security skills. Docker Hub · npm · Roadmap · Walkthroughs · Contributing · Good...

WordPress Welcart e-Commerce plugin <= 2.12.1 - Unauthenticated Stored Cross-Site Scripting via 'custom_order' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'customorder' Parameter vulnerability discovered by Afifudin Maarif in WordPress Plugin Welcart e-Commerce versions = 2.12.1...

CVE-2025-7461

CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System 🌐 Language / 语言 : English | 简体中文 Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/...

CVE-2021-39475

CVE-2021-39475 XSS on admin reviews page https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

ricerca-tesi

ricerca-tesi risorse di ricerca per cve-2026-7228 Strumenti Installazione virtual-box installazione di virtual-box: https://www.virtualbox.org/wiki/Downloads Installazione iso windows 11 https://www.microsoft.com/it-it/software-download/windows11 Installazione distro linux: lubuntu...

CVE-2025-29722

🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF in Commercify v1.0 Discovered by: David P.S Abraham aka Davycipher CVE ID CVE-2025-29722 has been assigned to this vulnerability by MITRE Corporation. Summary A CSRF vulnerability was identified in Commercify v1.0 , an open-source e-commerce...

CVE-2026-5800

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-4378

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this...

EUVD-2026-67740

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this...

CVE-2026-4378

A Stored Cross-Site Scripting (XSS) vulnerability in Akilli Ticaret Software Technologies Ltd. 's E-Commerce Pack (versions 4.5.001 through 28082026) is caused by improper neutralization of input during web page generation . The CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope, indicating a lo...

CVE-2026-4378 Stored XSS in Akıllı Ticaret's E-Commerce Pack

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akilli Ticaret Software Technologies Ltd. E-Commerce Pack allows Stored XSS. This issue affects E-Commerce Pack: from 4.5.001 through 28082026. NOTE: The vendor was contacted early about this...

CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

EUVD-2026-67722

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-5800

CVE-2026-5800 is a Reflected XSS vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform , caused by improper neutralization of input during web page generation. It affects versions through 28082026 . The CVSS 3.1 score is 6.1 (MEDIUM) with a changed scope, requiring user in...

PT-2026-83132

Name of the Vulnerable Software and Affected Versions Akilli Ticaret Software Technologies Ltd. E-Commerce Pack versions 4.5.001 through 28082026 Description Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting XSS, a condition where malicious scripts...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 Utilizzo Requisiti Python 3 Esecuzione root@kitploit: $ python poccve20133651.py - es. $ python poccve20133651.py http://127.0.0.1:9000/ Risultato: Vulnerabile! PoC Vulnerabilità | Costruzione e rinnovo di siti e-commerce con «EC Open Platform EC-CUBE»...