9.3
Critique
CVE-2024-33551 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XStore Core 5.3 | premières → 5.3.5 | Pas de correctif indiqué |
| xstore_core | Versions non publiées |
Autres CVE de XStore Core
Les 12 CVE de XStore Core →
CVE-2026-25306
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
7.1
Élevée
CVE-2026-25307
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
6.5
Moyenne
CVE-2025-64190
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
6.5
Moyenne
CVE-2025-64189
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core…
7.1
Élevée