PT-2026-45707 · WordPress · Easycart
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Easy Cart versions prior to 1.9
Description
The Easy Cart plugin for WordPress contains a Stored Cross-Site Scripting issue. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages. This occurs because the
ectp add to cart() function fails to properly escape double quote characters when processing shortcode attributes, allowing an attacker to break out of the HTML attribute context and inject event handlers. The affected attributes include itemid, product name, product desc, product qty, and price within the 'add to cart' shortcode.Recommendations
Update to a version later than 1.8.
As a temporary workaround, restrict the use of the 'add to cart' shortcode and its attributes
itemid, product name, product desc, product qty, and price for users with Contributor-level access.Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Easycart