Cross site scripting

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

Sql injection

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor without setting authority or higher privilege to perform unintended database operations...

Sql injection

SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information...

CVE-2023-43614

Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-43614

Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-43614

CVE-2023-43614 affects Welcart e-Commerce plugin for WordPress, versions 2.7–2.8.21. The issue is a cross-site scripting vulnerability on the Order Data Edit page, enabling a remote unauthenticated attacker to inject arbitrary script. Red Hat and other sources corroborate the same description acr...

CVE-2023-43610

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor without setting authority or higher privilege to perform unintended database operations...

CVE-2023-43610

SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor without setting authority or higher privilege to perform unintended database operations...

CVE-2023-43610

CVE-2023-43610 is a SQL injection vulnerability in Welcart e-Commerce (WordPress plugin) affecting versions 2.7–2.8.21. The issue exists in the Order Data Edit page, allowing a user with editor-level privileges or higher to perform unintended database operations. Red Hat and JVN entries corrobora...

CVE-2023-43493

CVE-2023-43493 concerns a SQL injection in the Welcart e‑Commerce WordPress plugin. The vulnerability is in the Item List page and affects versions 2.7 to 2.8.21, enabling a user with author or higher privileges to obtain sensitive information. Red Hat/Red flags and CVE aggregations corroborate t...

CVE-2023-43493

SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information...

CVE-2023-43493

SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information...

CVE-2023-43484

Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-43484

Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-43484

CVE-2023-43484 is a cross-site scripting vulnerability affecting Welcart e-Commerce plugin for WordPress, specifically versions 2.7 to 2.8.21. The issue resides in the Item List page, enabling a remote unauthenticated attacker to inject arbitrary scripts. Public entries consistently describe the ...

CVE-2023-41962

Welcart e‑Commerce contains an XSS vulnerability CVE-2023‑41962 affecting versions 2.7–2.8.21 in the Credit Card Payment Setup page. The flaw allows a remote, unauthenticated attacker to inject arbitrary scripts into the affected page. Publicly documented impact includes execution of client-side ...

CVE-2023-41962

Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-41233

CVE-2023-41233 affects Welcart e-Commerce plugin for WordPress, versions 2.7–2.8.21. The vulnerability is a Cross-site Scripting (XSS) flaw in the Item List page registration process, allowing a remote unauthenticated attacker to inject arbitrary script. The root cause is inadequate sanitization/...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...