Vulnerabilities

TI-2012-04367 CVE-2012-5178 · GHSA-gcqw-jc7p-cm29

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0107 Published 2012-12-19 No fix listed CWE-352

TI-2012-04366 CVE-2012-5177 · GHSA-87p7-g773-mghv

Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress…

LOW 24

Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01948 Published 2012-12-19 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for…

Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress…