Log out
Get PRO

Latest

Input validation vulnerability in Easy PayPal Shopping Cart 1.1.10

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 3, 2023

The Easy PayPal Shopping Cart plugin for WordPress has a security vulnerability that can allow attackers to inject malicious web scripts into pages. These scripts can execute whenever a user accesses the page, and the vulnerability affects all versions of the plugin up to, and including, version 1.1.10. This vulnerability is caused by the plugin not properly sanitizing user supplied attributes and not escaping the output. The attackers need to have contributor-level permissions or higher to be able to exploit the vulnerability.

Detected in:

Easy PayPal Shopping Cart fixed vulnerable versions: >= * <= 1.1.10

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.