Approved changes feed: RSS · Atom

cpe:2.3:a:enituretechnology:ltl_freight_quotes_–_daylight_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnituretechnology (86c8c1a1-4b5e-5497-9fe2-59a40ac10589)
ProductLtl Freight Quotes – Daylight Edition (9400a607-49a9-5f72-86cf-6fd6c34a49ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5303 vulnerable 2026-06-03 15:06:27.486157 LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter
HIGH (7.2)
The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the expiry_date parameter in all versions up to, and including, 1.0.11, 2.2.6 and 2.1.10 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-06-07T08:22:28.265Z
Updated: 2026-04-08T16:33:34.061Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58643 vulnerable 2026-06-03 15:06:22.243940 WordPress LTL Freight Quotes – Daylight Edition Plugin <= 2.2.7 - PHP Object Injection Vulnerability
HIGH (7.2)
Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-quotes-daylight-edition allows Object Injection.This issue affects LTL Freight Quotes – Daylight Edition: from n/a through <= 2.2.7.
Published: 2025-09-03T14:36:59.652Z
Updated: 2026-05-12T00:39:57.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.