7.1
Élevée
CVE-2026-115596 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| eCommerce Product Catalog 3.6 | premières → 3.6.4 | Pas de correctif indiqué |
Références
- patchstack.com patchstack.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de eCommerce Product Catalog
Les 10 CVE de eCommerce Product Catalog →
CVE-2026-116851
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions
7.1
Élevée
CVE-2026-105056
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
6.5
Moyenne
CVE-2026-96344
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions
7.2
Élevée
CVE-2026-76128
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode…
6.4
Moyenne