cbcvebase.

Zingiri Web Shop vulnerabilities

2 known vulnerabilities affecting zingiri/zingiri_web_shop.

Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2012-6506P4MEDIUMCVSS 4.3PoCv2.4.02013-01-24
CVE-2012-6506 [MEDIUM] CWE-79 CVE-2012-6506: Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPre Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in zing.inc.php or (2) notes parameter in fws/pages-front/onecheckout.php.
nvd
CVE-2012-4033P3CRITICALCVSS 10.0≤ 2.3.7v1.0.0+73 more2012-07-18
CVE-2012-4033 [CRITICAL] CVE-2012-4033: Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors.
nvd
Zingiri Web Shop vulnerabilities | cvebase