Eshop Project

1 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-3421 Jul 21, 14:29 MEDIUM This Month

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS Eshop Eshop Project

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2015-3421

EPSS 0% CVSS 6.1

MEDIUM This Month

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS +2

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy