9.3
Critical
CVE-2024-33551 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XStore Core 5.3 | earliest → 5.3.5 | No fix stated |
| xstore_core | Versions not published |
Other CVEs of XStore Core
The 12 CVEs of XStore Core →
CVE-2026-25306
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
7.1
High
CVE-2026-25307
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
6.5
Medium
CVE-2025-64190
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
6.5
Medium
CVE-2025-64189
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
7.1
High