Read the docs

Shoppagewp

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Shoppagewp records in CISA KEV

No Shoppagewp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shop Page Wp 1 record LOW

Records

1 record

TI-2021-07093 CVE-2021-24811 · GHSA-qmx3-vr4p-7jgf

Shop Page WP < 1.2.8 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Shop Page WP WordPress plugin before 1.2.8 does not sanitise and escape some of the Product fields, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is di…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-11-29 Fixed in 1.2.8 CWE-79
Open these records in search →