The Welcart e-Commerce WordPress... CVE-2022-4655
-
AV
AC
AU
C
I
A
发布：
2023-01-16
修订：
2025-02-20
The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, which could allow users with a role as low as a contributor to perform a Stored Cross-Site Scripting attack.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有2条受影响产品信息
