PT-2026-120501 · Undefined · Undefined
CVSS v3.1
2.7
منخفضة
| المتجه | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those products to the cart at that price.
استغلال
إصلاح
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Undefined