CVE-2016-4903

MEDIUM

Olivecart < 3.1.2 - XSS

Title source: rule

Description

Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Scores

CVSS v3 6.1
EPSS 0.0032
EPSS Percentile 55.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (4)
wp-olivecart/olivecart < 3.1.2
wp-olivecart/olivecartpro < 3.1.7
Olive Design/WP-OliveCart < versions prior to 3.1.3
Olive Design/WP-OliveCartPro < versions prior to 3.1.8
Published May 22, 2017
Tracked Since Feb 18, 2026