Vulnerabilities > Wclovers > Wcfm Marketplace > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-17 | CVE-2024-44009 | Cross-site Scripting vulnerability in Wclovers Wcfm Marketplace Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace allows Reflected XSS.This issue affects WCFM Marketplace: from n/a through 3.6.10. | 6.1 |
| 2024-01-11 | CVE-2023-4960 | Cross-site Scripting vulnerability in Wclovers Wcfm Marketplace The WCFM Marketplace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wcfm_stores' shortcode in versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |