Beveiligingsadvies

CVE-2026-16066

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-12 06:00:14

Laatst bijgewerkt 2026-08-12 16:09:32

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page.

← Alle CVE's bekijken Bekijk op cve.org ↗