Advisories · Technology
mra13 Simple Shopping Cart.
Every CVE that names mra13 Simple Shopping Cart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode
- mra13 Simple Shopping Cart
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- mra13 Simple Shopping Cart
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference
- mra13 Simple Shopping Cart
- Broken access control
- CVSS 5.3 Medium
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'
- mra13 Simple Shopping Cart
- Broken access control
- CVSS 7.5 High
WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation
- mra13 Simple Shopping Cart
- CWE-472
- CVSS 8.2 High
WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter
- mra13 Simple Shopping Cart
- Information disclosure
- CVSS 6.4 Medium
WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- mra13 Simple Shopping Cart
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
- mra13 Simple Shopping Cart
- Cross-site scripting (XSS)