CVE-2022-3935

The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2022-12-12

Last modified

2025-04-22

Affected products

• Welcart E-commerce (Unknown)
• Welcart E-commerce (Welcart)

References

• https://wpscan.com/vulnerability/906c5122-dd6d-494b-b66c-4162e234ea05