CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rajib.dewan Opencart Product in WP opencart-product-in-wp allows Reflected XSS.This issue affects Opencart Product in WP: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
A cross-site scripting (XSS) vulnerability in Opencart Product in WP versions up to 1.0.1 allows an attacker to inject malicious scripts that execute in visitors' browsers. The vulnerability requires user interaction—typically clicking a malicious link—and can affect other users on the site. An attacker can steal session cookies, redirect users, or deface page content.
What an attacker can do
Inject malicious JavaScript that runs in visitors' browsers to steal data or redirect users.
Potential impact on your site
Visitors may have sessions hijacked, be redirected to phishing sites, or see altered page content.
Conditions required to exploit
Visitor must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
