Log out
Get PRO

Latest

Input validation vulnerability in Cart66 Lite :: WordPress Ecommerce 1.5.5

  • Severity: medium-risk
  • Status: Open
  • Publication: January 26, 2015

The Cart66 Lite WordPress Ecommerce plugin is vulnerable to a type of attack called Reflected Cross-Site Scripting. This attack occurs when a user clicks on a link that has been crafted to contain malicious code. This malicious code can then be executed on the user’s device. Versions of the plugin up to and including 1.5.4 are affected because the plugin does not take the necessary steps to protect against this type of attack.

Detected in:

Cart66 Lite :: WordPress Ecommerce open vulnerable versions: >= * < 1.5.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.