6.5
Medium
CVE-2024-34767 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HasThemes ShopLentor allows Stored XSS.This issue affects ShopLentor: from n/a through 2.8.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ShopLentor 2.8 | earliest → 2.8.7 | No fix stated |
Other CVEs of ShopLentor
The 4 CVEs of ShopLentor →
CVE-2024-5530
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor)…
6.4
Medium
CVE-2022-47172
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions
4.3
Medium
CVE-2022-46798
Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor…
5.4
Medium