WordPress Plugin Vulnerabilities

eShop - Unauthenticated Reflected Cross-Site Scripting (XSS)

Description

The eshop WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
eshop
No known fix

References

CVE
CVE-2016-0765
URL
http://www.vapidlabs.com/advisory.php?v=160
URL
https://web.archive.org/web/20160308161138/https://permalink.gmane.org/gmane.comp.security.oss.general/18755

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
2aecf7bc-fe55-4e9a-8157-09ee9ed287d0

Timeline

Publicly Published
2016-02-02 (about 10 years ago)
Added
2016-02-02 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2004-12-31
Title
WordPress 1.2-1.2.1 - Multiple Cross-Site Scripting (XSS)
Published
2025-01-03
Title
BVD Easy Gallery Manager <= 1.0.6 - Reflected Cross-Site Scripting
Published
2023-08-01
Title
Bus Ticket Booking with Seat Reservation < 5.2.4 - Reflected XSS
Published
2024-04-05
Title
Bannerlid <= 1.1.0 - Reflected XSS
Published
2025-01-16
Title
WpDevTool <= 0.1.1 - Reflected Cross-Site Scripting