medium5.4
CVE-2022-3935
The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscribe…
Impact
The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Welcart | Welcart E-Commerce | before 2.8.4 |