3 matches found
CVE-2020-15537: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box...
6.1CVSS5.8AI score0.01167EPSS
SaveExploits2References2
CVE-2017-17873
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
9.8CVSS10AI score0.02652EPSS
SaveExploits2References1
CVE-2017-17873: Improper Neutralization of Special Elements used in an SQL Command
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
9.8CVSS8.1AI score0.02652EPSS
SaveExploits2References2
20