romancartsupport

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

romancartsupport records in CISA KEV

No romancartsupport vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-07802 CVE-2026-8880 · GHSA-6h5g-2c23-pj45

RomanCart Ecommerce <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

LOW 28

The RomanCart Ecommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blclass' attribute (and other attributes) of the romancart_button shortcode in versions up to, and including, 2.0.8.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00192 Published 2026-06-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0