Vulnerabilities > Implecode
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-11-23 | CVE-2021-24875 | Cross-site Scripting vulnerability in Implecode Ecommerce Product Catalog The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue | 6.1 |
| 2021-11-23 | CVE-2021-24894 | Improper Input Validation vulnerability in Implecode Reviews Plus The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when an authenticated user submit such rating and the reviews are set to be displayed on the post/page | 6.5 |