CVE-2016-4903

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 3.0 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-05-22

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Wp-olivecart (Olive Design)
• Wp-olivecartpro (Olive Design)
• Olivecart (Wp-olivecart)
• Olivecartpro (Wp-olivecart)

References

• http://www.securityfocus.com/bid/93790
• http://www.wp-olivecart.com/news/20160925.html
• https://jvn.jp/en/jp/JVN14567604/index.html