The usc-e-shop aka Collne Welcart e-Commerce plugin before 1.9.36 for WordPress allows Object Injection because of uscesunserialize. There is not a complete POP chain...
8.8CVSS7.2AI score0.01902EPSS
SaveExploits1References4
NVD•added 2020/11/07 7:15 p.m.•36 views
CVE-2020-28339
The usc-e-shop aka Collne Welcart e-Commerce plugin before 1.9.36 for WordPress allows Object Injection because of uscesunserialize. There is not a complete POP chain...