WordPress Plugin Vulnerabilities

eShop - wp-admin/admin.php Multiple Parameter XSS

Description

The eshop WordPress plugin was affected by a wp-admin/admin.php Multiple Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
eshop
Fixed in 6.2.9

References

URL
https://seclists.org/bugtraq/2011/Aug/52

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
14007aca-9172-4496-b921-0074deb20bc2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-03
Title
Free Google Maps <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2014-08-01
Title
BannerMan 0.2.4 - XSS in wp-admin/options-general.php via bannerman_background parameter
Published
2025-02-17
Title
Active Products Tables for WooCommerce. Use constructor to create tables < 1.0.6.7 - Reflected Cross-Site Scripting
Published
2024-02-22
Title
ProfilePress < 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via [reg-select-role] Shortcode
Published
2024-10-31
Title
SKSDEV Toolkit <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting