Order Delivery Date For Wp E Commerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-0678 MEDIUM This Month

The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS WordPress Order Delivery Date For Wp E Commerce

NVD VulDB

CVSS 3.1

6.5

EPSS

0.3%

CVE-2023-41859 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Order Delivery Date For Wp E Commerce

NVD

CVSS 3.1

4.8

EPSS

0.3%

CVE-2024-0678

EPSS 0% CVSS 6.5

MEDIUM This Month

XSS WordPress Order Delivery Date For Wp E Commerce

NVD VulDB

CVE-2023-41859

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Order Delivery Date For Wp E Commerce

NVD