Approved changes feed: RSS · Atom

cpe:2.3:a:thecartpress:thecartpress:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

VendorThecartpress (75906da7-0b9e-59a7-a218-4dae0d7174ed)
ProductThecartpress (c2a93fbc-e5fc-5de9-a5e1-68f2632f1706)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/tcp-sensei/thecartpress purl2cpe 2026-06-01 10:16:53.205851
pkg:github/wp-plugins/thecartpress purl2cpe 2026-06-01 10:16:53.205852
pkg:github/wpplugins/thecartpress purl2cpe 2026-06-01 10:16:53.205854

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5207 vulnerable 2026-06-08 04:59:35.108619 Details available
Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter.
Published: 2012-10-04T17:00:00.000Z
Updated: 2024-08-07T00:30:46.860Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.