Vulnerabilities

TI-2015-01974 CVE-2015-2216 · GHSA-8456-3m6q-2qvj

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress…

MEDIUM 40

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04594 Published 2015-03-05 No fix listed CWE-89

TI-2014-08280 CVE-2014-100016 · GHSA-gj5p-5vqr-58gw

Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the…

LOW 24

Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02041 Published 2015-01-13 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress…

Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the…