Zingiri Web Shop <= 2.4.0 - onecheckout.php notes Parameter XSS

The zingiri-web-shop WordPress plugin was affected by an onecheckout.php notes Parameter XSS security vulnerability...

CVE-2012-6506

Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...

PT-2013-1970

Name of the Vulnerable Software and Affected Versions Zingiri Web Shop plugin version 2.4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter in zing.inc.php or the notes parameter in fws/pages-front/onecheckout.php...

CVE-2012-6506: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter in zing.inc.php or 2 notes parameter in fws/pages-front/onecheckout.php...