Description
Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4827.
References
- JVN#95082904 third-party-advisory
- JVNDB-2016-000116 third-party-advisory
- http://www.welcart.com/community/archives/78977