| Package | Affected versions | Patched versions |
|---|---|---|
| wp e-commerce | = 3.6.10= 3.6.11= 3.6.12= 3.6.13= 3.6.5= 3.6.6= 3.6.7= 3.6.8= 3.6.9= 3.7= 3.7.1= 3.7.2= 3.7.3= 3.7.4= 3.7.5= 3.7.5.1= 3.7.5.2= 3.7.5.3= 3.7.6= 3.7.6.1= 3.7.6.2= 3.7.6.3= 3.7.6.4= 3.7.6.5= 3.7.6.6= 3.7.6.7= 3.7.6.9= 3.7.7= 3.7.8= 3.7.8.1= 3.7.8.2= 3.7.8.3= 3.8= 3.8.1= 3.8.2= 3.8.3= 3.8.4= 3.8.5= 3.8.6= 3.8.6.1= 3.8.7≤ 3.8.7.1 |
Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free