TI-2023-00492 CVE-2023-0520 · GHSA-36pc-5vqw-g5vm
RapidExpCart <= 1.0 - Stored XSS via CSRF
Priority MEDIUM 58
The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vul…