cart66 vulnerabilities

Products

• cart66 lite plugin 2

Latest cart66 CVEs

Newest publication first

1. CVE-2013-5978 Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Scripting

   Published 2019-12-11

   Medium·CVSS 6.1 EPSS 4.1% Public exploit

   Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php....

2. CVE-2013-5977 Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Request Forgery

   Published 2013-11-01

   Medium·CVSS 6.8 EPSS 3.2% Public exploit

   Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for requests that (1) create or modify products or conduct cross-site scripting (XSS...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.