PT-2023-26511 · Unknown · Phpscriptpoint Ecommerce

Name of the Vulnerable Software and Affected Versions: phpscriptpoint Ecommerce version 1.15 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /blog-single.php. The manipulation of the slug argument leads to cross-site scripting. The...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.0 Fixed in 3.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress Sync eCommerce NEO Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software Sync eCommerce NEO Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9dbd1f3d1861 Credits Rafie Muhammad Patchstack Require...

WordPress WordPress eCommerce Plugin – Studiocart Plugin < 2.5.20 is vulnerable to Cross Site Scripting (XSS)

Software WordPress eCommerce Plugin – Studiocart Type Plugin Vulnerable versions 2.5.20 Fixed in 2.5.20 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5eb1bf45cbd4 Credits Rafie...

WordPress eCommerce Addon Plugin < 1.4 is vulnerable to Cross Site Scripting (XSS)

Software eCommerce Addon Type Plugin Vulnerable versions 1.4 Fixed in 1.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d6579c076d16 Credits Rafie Muhammad Patchstack Required...

WordPress ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34011 Patch priority Medium CVSS severity Medium 7.1 Develop...

Ecommerce 1.15 Cross Site Scripting

Exploit Title: Ecommerce 1.15 - Reflected XSS Exploit Author: CraCkEr Date: 16/07/2023 Vendor: phpscriptpoint Vendor Homepage: https://phpscriptpoint.com/ Software Link: https://demo.phpscriptpoint.com/ecommerce/ Tested on: Windows 10 Pro Impact: Manipulate the content of the site Description The...

CVE-2023-3506

A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...

Cross site scripting

A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...

CVE-2023-3506

CVE-2023-3506 affects Active It Zone Active eCommerce CMS 6.5.0, specifically the Create Ticket Page component, file path /ecommerce/support_ticket. The issue arises from manipulating the details argument with a payload like , causing cross-site scripting. The description indicates the attack can...

PT-2023-25119 · Activeitzone · Active It Zone Active Ecommerce Cms

Name of the Vulnerable Software and Affected Versions: Active It Zone Active eCommerce CMS version 6.5.0 Description: A vulnerability was found in the Create Ticket Page component, specifically affecting the file /ecommerce/support ticket. The issue arises from the manipulation of the details...

Active It Zone Active eCommerce CMS 跨站脚本漏洞

Active It Zone Active eCommerce CMS is a CMS system from Active It Zone, Inc. A cross-site scripting vulnerability exists in Active It Zone Active eCommerce CMS version 6.5.0, which stems from the parameter details in the file /ecommerce/supportticket that causes cross-site scripting...

CVE-2021-4393

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save...

Cross site request forgery (csrf)

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated...

Cross site request forgery (csrf)

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save...

CVE-2021-4392 eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated...

CVE-2021-4392

CVE-2021-4392 affects the WordPress plugin “eCommerce Product Catalog” (versions up to and including 2.9.43). Root cause: missing or incorrect nonce validation in the implecode_save_products_meta() function, enabling CSRF. Impact: unauthenticated attackers can save product meta data by tricking a...

CVE-2021-4392 eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43. This is due to missing or incorrect nonce validation on the implecodesaveproductsmeta function. This makes it possible for unauthenticated...

CVE-2021-4393 eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to save...

CVE-2021-4393

The CVE-2021-4393 entry concerns the eCommerce Product Catalog Plugin for WordPress, where a Cross-Site Request Forgery flaw stems from missing/incorrect nonce validation in the plugin’s save() function. Affected are versions up to 3.0.17. This allows unauthenticated attackers to forge requests t...