Vulnerabilities

TI-2024-12551 CVE-2024-13510 · GHSA-9j6p-c76p-69c9

ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 26

The ShopSite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00156 Published 2025-02-04 No fix listed CWE-352

TI-2024-15063 CVE-2024-22550 · GHSA-9xx5-8h94-vx2v

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of…

MEDIUM 60

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00574 Published 2024-01-26 No fix listed CWE-434

TI-2006-06232 CVE-2006-6485 · GHSA-q289-c2ww-fm2m

Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the prevlocation parameter in shopper/sc/registration.cgi and other unspec…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01939 Published 2006-12-12 No fix listed

Vulnerabilities

Filters

ShopSite <= 1.5.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting

An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of…

Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow…