WordPress Online eStore Theme <= 1.0.9 is vulnerable to Broken Access Control

Software Online eStore Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32959 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 729988cdbce6 Credits Dave Jong Patchstack Require...

mile2.com XSS vulnerability

Vulnerable URL: https://mile2.com/mile2-online-estore/search.html?keyword=1%22--!%3E%3CSvg/OnLoad=confirm%27OPENBUGBOUNTY%27%3E%22 Details: Description| Value ---|--- Patched:| Yes, at 15.11.2017 Latest check for patch:| 15.11.2017 20:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...