WordPress Plugin Vulnerabilities

WP eCommerce 3.8.9.5 - Cross-Site Scripting (XSS)

Description

The WP eCommerce WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wp-e-commerce
Fixed in 3.8.12

References

URL
https://en.0day.today/exploits/20517

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
71dd9284-4d19-4532-a1a5-8f31993f6d3d

Timeline

Publicly Published
2015-02-09 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-04-09
Title
WooCommerce – Payphone Gateway < 3.2.1 - Reflected Cross-Site Scripting
Published
2025-02-03
Title
Logo Slider < 4.6.0 - Contributor+ Stored XSS
Published
2020-03-04
Title
Appointment Booking Calendar < 1.3.35 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2024-07-01
Title
WP QuickLaTeX < 3.8.8 - Admin+ Stored XSS
Published
2024-08-15
Title
WordPress File Upload < 4.24.9 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload