Skip to content
OpenAdvisories

Vendor

Etoilewebdesign

2 known vulnerabilities.

Products

Ultimate Product Catalog 1 Ultimate Product Catalogue 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47924

    WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price

    Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in …

    Etoilewebdesign Ultimate Product Catalogue Web / CMS