Description
The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces_unserialize. There is not a complete POP chain.
High · 7.5
CVE-2020-28339
EUVD-2020-20801GHSA-vh49-3q2g-93gh
The usc-e-shop (aka Collne Welcart e-Commerce) plugin before 1.9.36 for WordPress allows Object Injection because of usces_unserialize. The…
Published Nov 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre