Vulnerabilities

TI-2024-00625 CVE-2024-0678 · GHSA-7xmr-w6vf-6jjf

Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting

LOW 35

The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to insufficient input saniti…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00446 Published 2024-02-05 No fix listed CWE-79

TI-2023-22252 CVE-2023-41859 · GHSA-mr7v-98j2-2j7x

WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-10-02 No fix listed CWE-79

Vulnerabilities

Filters

Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting

WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)