CVE-2021-34645

The CVE-2021-34645 entry concerns the WordPress plugin “Shopping Cart & eCommerce Store” and a CSRF flaw in the save_currency_settings function (~/admin/inc/wp_easycart_admin_initial_setup.php) affecting versions up to 5.1.0. The vulnerability can inject arbitrary scripts (stored XSS as implied b...