Vulnerabilities

TI-2012-04485 CVE-2012-5310 · GHSA-3hwg-mg48-rrmm

SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress…

LOW 37

SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02111 Published 2012-10-08 No fix listed CWE-89

TI-2011-04381 CVE-2011-5104 · GHSA-5wj8-82fg-f5qg

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP…

LOW 24

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the cust…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0224 Published 2012-08-23 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress…

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP…