Lucene search
N/APATCHSTACK:34C06886BF3BA504C25001DC4D75B01FHistoryAug 23, 2012 - 12:00 a.m.
WordPress WP E-Commerce Plugin <= 3.8.7.1 - XSS
2012-08-2300:00:00
N/A
patchstack.com
4
0.003 Low
EPSS
Percentile
71.6%
Because of this vulnerability in wpsc-admin/display-sales-logs.php, the attackers can inject arbitrary web script or HTML via the “custom_text” parameter.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp ecommerce | le | 3.8.7.1 |
Related
nvd
nvd
CVE-2011-5104
2012-08-23 20:55:02
cvelist
cvelist
CVE-2011-5104
2012-08-23 20:00:00
cve
cve
CVE-2011-5104
2012-08-23 20:55:02
prion
prion
Cross site scripting
2012-08-23 20:55:00