CVE-2015-2973

MITTEL 4.3CVE-2015-2973 · Published 24/07/2015 · updated 17/06/2026

Kurz gesagt

CVE-2015-2973 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in welcart e-commerce (welcart).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.0%, höher als bei 81.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
welcart e-commerce welcart	`≤ 1.4.17`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to (1) classes/usceshop.class.php, (2) includes/edit-form-advanced.php, (3) includes/edit-form-advanced30.php, (4) includes/edit-form-advanced34.php, (5) includes/member_edit_form.php, (6) includes/order_edit_form.php, (7) includes/order_list.php, or (8) includes/usces_item_master_list.php, related to admin.php.

References

jvn.jp/en/jp/JVN97971874/index.html · Vendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000103 · Vendor Advisory
welcart.com/community/archives/74867 · Patch
plugins.trac.wordpress.org/changeset/1199120
wpvulndb.com/vulnerabilities/8114

Weitere Schwachstellen in welcart e-commerce

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

welcart e-commerce

welcart

≤ 1.4.17

No fix yet

Description

Weitere Schwachstellen in welcart e-commerce

Alle anzeigen →