CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

Design/Logic Flaw

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

Cross site scripting

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

CVE-2016-10920

CVE-2016-10920 concerns the WordPress plugin gnucommerce prior to version 0.5.7-BETA, which contains a cross-site scripting (XSS) vulnerability in its handling of user input. Multiple sources across NVD/Red Hat/CNVD/CVE records confirm an XSS risk in this plugin version, potentially allowing an a...

CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2017-18572

CVE-2017-18572 affects the WordPress GNUCommerce plugin prior to version 1.4.2. The issue is an XSS vulnerability in the plugin (gnucommerce) that can allow execution of client-side code, as described in multiple sources (including Red Hat and CNVD/NVD records). The vulnerability arises in the gn...

Gnucommerce < 1.4.2 - XSS

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability...

Gnucommerce < 0.5.7-beta - XSS

The GNUCommerce WordPress plugin was affected by a XSS security vulnerability...