Cross site scripting

2012-08-2320:55:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

JSON

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
wp_e-commercele3.8.7.1
wp_e-commerceeq3.6.5
wp_e-commerceeq3.6.6
wp_e-commerceeq3.6.7
wp_e-commerceeq3.6.8
wp_e-commerceeq3.6.9
wp_e-commerceeq3.6.10
wp_e-commerceeq3.6.11
wp_e-commerceeq3.6.12
wp_e-commerceeq3.6.13

Name	Operator	Version
wp_e-commerce	le	3.8.7.1
wp_e-commerce	eq	3.6.5
wp_e-commerce	eq	3.6.6
wp_e-commerce	eq	3.6.7
wp_e-commerce	eq	3.6.8
wp_e-commerce	eq	3.6.9
wp_e-commerce	eq	3.6.10
wp_e-commerce	eq	3.6.11
wp_e-commerce	eq	3.6.12
wp_e-commerce	eq	3.6.13