← Database

CVE-2022-3935

MEDIUM CVSS: 5.4 Published: 2022-12-12 Modified: 2026-06-17

Description

The Welcart e-Commerce WordPress plugin before 2.8.4 does not sanitise and escape some parameters, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks

Affected Platforms

Welcart Welcart E-Commerce

Weakness Type

Unknown

References