CVE-2023-5951 (published 2023-12-04T21:28:42.287Z)
The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected products: Vendor: Unknown
Product: Welcart e-Commerce
Versions: 0