The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks
CPE | Name | Operator | Version |
---|---|---|---|
welcart_e-commerce | lt | 2.8.4 |