CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS.
References
Link Resource
https://wordpress.org/plugins/gnucommerce/#developers Release Notes Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sir:gnucommerce:0.1:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.1.4:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.1:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.2:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.3:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.4:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.5:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.7:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.8:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.2.9:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.0:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.1:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.2:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.3:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.4:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.6:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.7:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.3.8:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.0:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.1:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.2:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.3:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.5:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.4.6:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.5.0:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.5.1:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.5.2:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.5.4:beta:*:*:*:*:*:*
cpe:2.3:a:sir:gnucommerce:0.5.5:beta:*:*:*:*:*:*

History

No history.

Information

Published : 2019-08-22 13:15

Updated : 2024-02-04 20:20


NVD link : CVE-2016-10920

Mitre link : CVE-2016-10920

CVE.ORG link : CVE-2016-10920


JSON object : View

Products Affected

sir

  • gnucommerce
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')