CVE-2016-4827

MEDIUM 6.1CVE-2016-4827 · Published 25/06/2016 · updated 17/06/2026

In short

CVE-2016-4827 is a MEDIUM (CVSS 6.1) vulnerability affecting welcart e-commerce (welcart).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.1% of all vulnerabilities.
Fix: update to 1.8.3 or later.

Package	Affected versions	Patched versions
welcart e-commerce welcart	`< 1.8.3`	`1.8.3`

Description

Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826.

References

jvn.jp/en/jp/JVN55826471/index.html · Vendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2016-000117 · Third Party Advisory
welcart.com/community/archives/78977 · Vendor Advisory

More vulnerabilities in welcart e-commerce

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

welcart e-commerce

welcart

< 1.8.3

1.8.3

More vulnerabilities in welcart e-commerce

See all →