Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2024-44004
- EPSS 0.28%
- Veröffentlicht 17.09.2024 23:15:19
- Zuletzt bearbeitet 24.09.2024 19:22:14
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTaskForce WPCargo Track & Trace allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through 7.0.6.
4.8
CVE-2022-1435
- EPSS 0.21%
- Veröffentlicht 16.05.2022 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:40:43
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
6.1
CVE-2022-1436
- EPSS 0.2%
- Veröffentlicht 16.05.2022 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:40:43
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
1