Shopping Cart & eCommerce Store, CVE-2021-34645

CVE, Research URL: CVE-2021-34645
Home page URL: Security reports for Shopping Cart & eCommerce Store
Application: Shopping Cart & eCommerce Store
Published on: Aug 19, 2021
Research Description: The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.
Affected versions: max 5.1.5.
Status: vulnerable

Shopping Cart &amp; eCommerce Store, CVE-2021-34645