cleantalk
Vulnerabilities and Security Researches

Welcart e-Commerce, CVE-2023-5952

CVE, Research URL

CVE-2023-5952

Application

Welcart e-Commerce

Published on
Dec 05, 2023
Research Description
The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog
Affected versions
Min -, max 2.9.5.
Status
vulnerable