CVE-2024-4069

CVE-2024-4069 affects Kashipara Online Furniture Shopping Ecommerce Website 1.0. A vulnerability in the search.php file allows SQL injection via the txtSearch parameter, enabling remote execution with exploitation disclosed publicly. Connected documents confirm the affected component and vulnerab...

CVE-2024-4069 Kashipara Online Furniture Shopping Ecommerce Website search.php sql injection

A vulnerability, which was classified as critical, was found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file search.php. The manipulation of the argument txtSearch leads to sql injection. It is possible to initiate the attack remotely. The...

Online Furniture Shopping Ecommerce Website SQL注入漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A SQL injection vulnerability exists in the Online Furniture Shopping Ecommerce Website, which is caused by a SQL injection vulnerability in the txtSearch parameter of the search.php...

Kashipara Online Furniture Shopping Ecommerce Website 跨站脚本漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A cross-site scripting vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website, which originates from a cross-site scripting vulnerability in the prodId paramete...

CVE-2024-32558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

CVE-2024-32558

CVE-2024-32558 is a reflected XSS in the WordPress plugin “eCommerce Product Catalog” by impleCode, affecting versions from unknown up to 3.3.32. The issue stems from improper input neutralization during web page generation, enabling Reflected XSS payloads. Wordfence/Red Hat entries indicate the ...

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

CVE-2024-32558 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32...

WordPress Plugin eCommerce Product Catalog 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Plugin...

WP EasyCart < 5.6.0 - Cross-Site Request Forgery

Description The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.19. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perfo...

eCommerce Product Catalog < 3.3.29 - Cross-Site Request Forgery

Description The eCommerce Product Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.28. This is due to missing or incorrect nonce validation on the handlemode function. This makes it possible for unauthenticated attackers to change mode...

WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin eCommerce Product Catalog versions = 3.3.32...

WordPress eCommerce Product Catalog Plugin <= 3.3.32 is vulnerable to Cross Site Scripting (XSS)

Software eCommerce Product Catalog Type Plugin Vulnerable versions = 3.3.32 Fixed in 3.3.33 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32558 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e15b34a96280 Credits Dimas Maulana Requir...

CVE-2024-32437

Cross-Site Request Forgery CSRF vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28...

CVE-2024-32437

CVE-2024-32437 is a Cross-Site Request Forgery (CSRF) vulnerability in the impleCode eCommerce Product Catalog WordPress plugin. It affects the plugin for “eCommerce Product Catalog: from n/a through 3.3.28.” The root cause is CSRF, requiring user interaction to exploit, potentially enabling unau...

CVE-2024-32437 WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28...

CVE-2024-32437 WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28...

CVE-2024-32452 WordPress Shopping Cart & eCommerce Store plugin <= 5.5.19 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

WordPress Plugin eCommerce Product Catalog 跨站请求伪造漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress Plugin eCommerce Product Catalog A cross-site request forger...

WordPress Plugin Shopping Cart & eCommerce Store 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Shopping Cart & eCommerce Store A...