Approved changes feed: RSS · Atom

cpe:2.3:a:codepeople:music_store:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodepeople (f85d1a73-9b3f-50b5-b09d-cd136586594b)
ProductMusic Store (72d359e0-798e-54fb-809e-7c0dda8d42b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/music-store purl2cpe 2026-06-01 10:10:56.636570

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24626 vulnerable 2026-06-03 14:59:56.464684 WordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Music Store music-store allows Reflected XSS.This issue affects Music Store: from n/a through <= 1.1.19.
Published: 2025-01-27T14:22:16.202Z
Updated: 2026-05-11T23:19:57.378Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.