CVE-2015-4582

CVE-2015-4582 affects TheCartPress boot-store theme (WordPress) version 1.6.4. The flaw is a cross-site scripting (XSS) vulnerability in header.php via the tcp_register_error function. Public sources in the connected docs identify the affected software and the XSS outcome, but do not provide a co...

CVE-2024-5938

The CVE-2024-5938 entry concerns Boot Store (WordPress theme). It is vulnerable to Stored XSS via the link parameter of the theme’s Button shortcode in all versions up to and including 1.6.4, due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-le...