wstmart vulnerabilities

Products

• wstmart 2

Latest wstmart CVEs

Newest publication first

1. CVE-2018-20367 The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consultContent parameter, as demonstrated by the index.php/home/goodsconsult/add.html...

   Published 2018-12-22

   Medium·CVSS 6.1 EPSS 0.71%

   The "mall some commodity details: commodity consultation" component in WSTMart 2.0.8_181212 has stored XSS via the consultContent parameter, as demonstrated by the index.php/home/goodsconsult/add.html URI.

2. CVE-2018-19138 WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.

   Published 2018-11-09

   High·CVSS 8.8 EPSS 2.2% Public exploit

   WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.