CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5978

Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.025

EPSS Ranking 84.6%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2013-5978

Cart66 » Cart66 Lite Plugin » Version: 1.0.7

cpe:2.3:a:cart66:cart66_lite_plugin:1.0.7
Cart66 » Cart66 Lite Plugin » Version: 1.0.8

cpe:2.3:a:cart66:cart66_lite_plugin:1.0.8
Cart66 » Cart66 Lite Plugin » Version: 1.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.1
Cart66 » Cart66 Lite Plugin » Version: 1.1.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.1
Cart66 » Cart66 Lite Plugin » Version: 1.1.2

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.2
Cart66 » Cart66 Lite Plugin » Version: 1.1.3

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.3
Cart66 » Cart66 Lite Plugin » Version: 1.1.4

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.4
Cart66 » Cart66 Lite Plugin » Version: 1.1.5

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.5
Cart66 » Cart66 Lite Plugin » Version: 1.1.6

cpe:2.3:a:cart66:cart66_lite_plugin:1.1.6
Cart66 » Cart66 Lite Plugin » Version: 1.3.0

cpe:2.3:a:cart66:cart66_lite_plugin:1.3.0
Cart66 » Cart66 Lite Plugin » Version: 1.4.0

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.0
Cart66 » Cart66 Lite Plugin » Version: 1.4.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.1
Cart66 » Cart66 Lite Plugin » Version: 1.4.2

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.2
Cart66 » Cart66 Lite Plugin » Version: 1.4.4

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.4
Cart66 » Cart66 Lite Plugin » Version: 1.4.7

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.7
Cart66 » Cart66 Lite Plugin » Version: 1.4.8

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.8
Cart66 » Cart66 Lite Plugin » Version: 1.4.9

cpe:2.3:a:cart66:cart66_lite_plugin:1.4.9
Cart66 » Cart66 Lite Plugin » Version: 1.5.0

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.0
Cart66 » Cart66 Lite Plugin » Version: 1.5.0.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.0.1
Cart66 » Cart66 Lite Plugin » Version: 1.5.0.2

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.0.2
Cart66 » Cart66 Lite Plugin » Version: 1.5.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.1
Cart66 » Cart66 Lite Plugin » Version: 1.5.1.1

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.1.1
Cart66 » Cart66 Lite Plugin » Version: 1.5.1.14

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.1.14
Cart66 » Cart66 Lite Plugin » Version: 1.5.1.2

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.1.2
Cart66 » Cart66 Lite Plugin » Version: 1.5.1.8

cpe:2.3:a:cart66:cart66_lite_plugin:1.5.1.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5978

Products

Pricing

Contact Us