Cross-Site Request Forgery Vulnerability in Cart66 Lite Plugin for WordPress
CVE-2013-5977

Currently unrated

Key Information:

Vendor
Wordpress
Status
Cart66 Lite Plugin
Vendor
CVE Published:
1 November 2013

Summary

A vulnerability in the Cart66 Lite plugin for WordPress allows remote attackers to exploit CSRF weaknesses, enabling unauthorized actions by hijacking the authentication of administrators. Specifically, this can lead to manipulation of product details or execution of cross-site scripting (XSS) attacks through fields such as the product name or price description during a product save action. Version 1.5.1.14 and earlier are particularly susceptible to this issue, which highlights the necessity for prompt updates and security measures.

References

http://archives.neohapsis.com/archives/bugtraq/2013-10/00...
mailing-listx_refsource_BUGTRAQ
http://www.exploit-db.com/exploits/28959
exploitx_refsource_EXPLOIT-DB
http://osvdb.org/98352
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.