CVE-2016-10920

CVE-2016-10920 concerns the WordPress plugin gnucommerce prior to version 0.5.7-BETA, which contains a cross-site scripting (XSS) vulnerability in its handling of user input. Multiple sources across NVD/Red Hat/CNVD/CVE records confirm an XSS risk in this plugin version, potentially allowing an a...

CVE-2017-18572

CVE-2017-18572 affects the WordPress GNUCommerce plugin prior to version 1.4.2. The issue is an XSS vulnerability in the plugin (gnucommerce) that can allow execution of client-side code, as described in multiple sources (including Red Hat and CNVD/NVD records). The vulnerability arises in the gn...