CVE-2023-43484

CVE-2023-43484 is a cross-site scripting vulnerability affecting Welcart e-Commerce plugin for WordPress, specifically versions 2.7 to 2.8.21. The issue resides in the Item List page, enabling a remote unauthenticated attacker to inject arbitrary scripts. Public entries consistently describe the ...

CVE-2023-43484

Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-41962

Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...

CVE-2023-41962

Welcart e‑Commerce contains an XSS vulnerability CVE-2023‑41962 affecting versions 2.7–2.8.21 in the Credit Card Payment Setup page. The flaw allows a remote, unauthenticated attacker to inject arbitrary scripts into the affected page. Publicly documented impact includes execution of client-side ...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-41233

CVE-2023-41233 affects Welcart e-Commerce plugin for WordPress, versions 2.7–2.8.21. The vulnerability is a Cross-site Scripting (XSS) flaw in the Item List page registration process, allowing a remote unauthenticated attacker to inject arbitrary script. The root cause is inadequate sanitization/...

CVE-2023-40532

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server...

CVE-2023-40532

Welcart e-Commerce contains a path traversal vulnerability (CVE-2023-40532) affecting versions 2.7–2.8.21. A user with author or higher privilege can obtain partial information about server files. Red Hat, JVN, and WPVulndb entries align on the issue and remediation guidance. The fix is to update...

CVE-2023-40532

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server...

CVE-2023-40219

Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory...

CVE-2023-40219

Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory...

CVE-2023-40219

CVE-2023-40219 affects Welcart e-Commerce (plugin version 2.7–2.8.21 ) where an user with editor or higher privileges can upload an arbitrary file to an unauthorized directory. The associated vulnerability entry notes an Authenticated (Editor+) Arbitrary File Upload with high impact (CVSS v3.1: A...

PT-2023-27335 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.7 to 2.8.21 Description: The issue allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory. Recommendations: For Welcart e-Commerce versions 2.7 to 2.8.21, consider...

PT-2023-28876

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions 2.7 to 2.8.21 Description A cross-site scripting issue in the Order Data Edit page allows a remote unauthenticated attacker to inject an arbitrary script. Recommendations For versions 2.7 to 2.8.21, update to a...

PT-2023-28193

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions 2.7 to 2.8.21 Description A cross-site scripting issue in the Credit Card Payment Setup page allows a remote unauthenticated attacker to inject an arbitrary script into the page. This enables the attacker to execute...

CVE-2023-40219: Unrestricted Upload of File with Dangerous Type

Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory...

CVE-2023-41962: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...

CVE-2023-43614: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-43493: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information...