CVE-2011-5104 WP eCommerce < 3.8.7.2 - Stored Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| getshopped wp e-commerce | <= 3.8.7.1 | No fix listed |
| getshopped wp e-commerce | = 3.6.5 | No fix listed |
| getshopped wp e-commerce | = 3.6.6 | No fix listed |
| getshopped wp e-commerce | = 3.6.7 | No fix listed |
| getshopped wp e-commerce | = 3.6.8 | No fix listed |
| getshopped wp e-commerce | = 3.6.9 | No fix listed |
| getshopped wp e-commerce | = 3.6.10 | No fix listed |
| getshopped wp e-commerce | = 3.6.11 | No fix listed |
| getshopped wp e-commerce | = 3.6.12 | No fix listed |
| getshopped wp e-commerce | = 3.6.13 | No fix listed |
| getshopped wp e-commerce | = 3.7 | No fix listed |
| getshopped wp e-commerce | = 3.7-beta2 | No fix listed |
| getshopped wp e-commerce | = 3.7-beta3 | No fix listed |
| getshopped wp e-commerce | = 3.7.1 | No fix listed |
| getshopped wp e-commerce | = 3.7.2 | No fix listed |
| getshopped wp e-commerce | = 3.7.3 | No fix listed |
| getshopped wp e-commerce | = 3.7.4 | No fix listed |
| getshopped wp e-commerce | = 3.7.5 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-beta1 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-beta2 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-rc1 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-rc2 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-rc3 | No fix listed |
| getshopped wp e-commerce | = 3.7.5-rc4 | No fix listed |
| getshopped wp e-commerce | = 3.7.5.1 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| getshopped wp e-commerce | = 3.7.5.1-beta | No fix listed |
| getshopped wp e-commerce | = 3.7.5.2 | No fix listed |
| getshopped wp e-commerce | = 3.7.5.3 | No fix listed |
| getshopped wp e-commerce | = 3.7.6 | No fix listed |
| getshopped wp e-commerce | = 3.7.6-rc1 | No fix listed |
| getshopped wp e-commerce | = 3.7.6-rc2 | No fix listed |
| getshopped wp e-commerce | = 3.7.6-rc3 | No fix listed |
| getshopped wp e-commerce | = 3.7.6-rc4 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.1 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.2 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.3 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.4 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.5 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.6 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.7 | No fix listed |
| getshopped wp e-commerce | = 3.7.6.9 | No fix listed |
| getshopped wp e-commerce | = 3.7.7 | No fix listed |
| getshopped wp e-commerce | = 3.7.8 | No fix listed |
| getshopped wp e-commerce | = 3.7.8.1 | No fix listed |
| getshopped wp e-commerce | = 3.7.8.2 | No fix listed |
| getshopped wp e-commerce | = 3.7.8.3 | No fix listed |
| getshopped wp e-commerce | = 3.8 | No fix listed |
| getshopped wp e-commerce | = 3.8-beta1 | No fix listed |
| getshopped wp e-commerce | = 3.8-beta2 | No fix listed |
| getshopped wp e-commerce | = 3.8-beta3 | No fix listed |
| getshopped wp e-commerce | = 3.8-rc1 | No fix listed |
| getshopped wp e-commerce | = 3.8-rc2 | No fix listed |
| getshopped wp e-commerce | = 3.8-rc3 | No fix listed |
| getshopped wp e-commerce | = 3.8-rc4 | No fix listed |
| getshopped wp e-commerce | = 3.8.1 | No fix listed |
| getshopped wp e-commerce | = 3.8.2 | No fix listed |
| getshopped wp e-commerce | = 3.8.3 | No fix listed |
| getshopped wp e-commerce | = 3.8.4 | No fix listed |
| getshopped wp e-commerce | = 3.8.5 | No fix listed |
| getshopped wp e-commerce | = 3.8.6 | No fix listed |
| getshopped wp e-commerce | = 3.8.6.1 | No fix listed |
| getshopped wp e-commerce | = 3.8.7 | No fix listed |
| wordpress wp-e-commerce(WordPress) | < 3.8.7.2 | 3.8.7.2 |
References
- 77249 vdb-entry
- plugins.trac.wordpress.org exploit patch
- 46957 third-party-advisory vendor-advisory
- wordpress.org vendor-advisory
- 50757 vdb-entry
- wpecommerce-index-xss(71443) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org