CVE-2015-3300

{"id": "CVE-2015-3300", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-05-14T14:59:08.900", "references": [{"url": "http://osvdb.org/show/osvdb/121438", "source": "[email protected]"}, {"url": "http://osvdb.org/show/osvdb/121469", "source": "[email protected]"}, {"url": "http://osvdb.org/show/osvdb/121470", "source": "[email protected]"}, {"url": "http://osvdb.org/show/osvdb/121471", "source": "[email protected]"}, {"url": "http://osvdb.org/show/osvdb/121472", "source": "[email protected]"}, {"url": "http://packetstormsecurity.com/files/131673/WordPress-TheCartPress-1.3.9-XSS-Local-File-Inclusion.html", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "http://www.securityfocus.com/archive/1/535396/100/0/threaded", "source": "[email protected]"}, {"url": "http://www.securityfocus.com/bid/74395", "source": "[email protected]"}, {"url": "https://wordpress.org/plugins/thecartpress/changelog/", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/36860/", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "https://www.htbridge.com/advisory/HTB23254", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "http://osvdb.org/show/osvdb/121438", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/show/osvdb/121469", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/show/osvdb/121470", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/show/osvdb/121471", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/show/osvdb/121472", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://packetstormsecurity.com/files/131673/WordPress-TheCartPress-1.3.9-XSS-Local-File-Inclusion.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/535396/100/0/threaded", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/74395", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://wordpress.org/plugins/thecartpress/changelog/", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/36860/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.htbridge.com/advisory/HTB23254", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote attackers to inject arbitrary web script or HTML via the (1) billing_firstname, (2) billing_lastname, (3) billing_company, (4) billing_tax_id_number, (5) billing_city, (6) billing_street, (7) billing_street_2, (8) billing_postcode, (9) billing_telephone_1, (10) billing_telephone_2, (11) billing_fax, (12) shipping_firstname, (13) shipping_lastname, (14) shipping_company, (15) shipping_tax_id_number, (16) shipping_city, (17) shipping_street, (18) shipping_street_2, (19) shipping_postcode, (20) shipping_telephone_1, (21) shipping_telephone_2, or (22) shipping_fax parameter to shopping-cart/checkout/; the (23) search_by parameter in the admin/AddressesList.php page to wp-admin/admin.php; the (24) address_id, (25) address_name, (26) firstname, (27) lastname, (28) street, (29) city, (30) postcode, or (31) email parameter in the admin/AddressEdit.php page to wp-admin/admin.php; the (32) post_id or (33) rel_type parameter in the admin/AssignedCategoriesList.php page to wp-admin/admin.php; or the (34) post_type parameter in the admin/CustomFieldsList.php page to wp-admin/admin.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de XSS en el plugin TheCartPress eCommerce Shopping Cart (tambi\u00e9n conocido como The Professional WordPress eCommerce Plugin) para WordPress en versiones anteriores a 1.3.9.3 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s del par\u00e1metro (1) billing_firstname, (2) billing_lastname, (3) billing_company, (4) billing_tax_id_number, (5) billing_city, (6) billing_street, (7) billing_street_2, (8) billing_postcode, (9) billing_telephone_1, (10) billing_telephone_2, (11) billing_fax, (12) shipping_firstname, (13) shipping_lastname, (14) shipping_company, (15) shipping_tax_id_number, (16) shipping_city, (17) shipping_street, (18) shipping_street_2, (19) shipping_postcode, (20) shipping_telephone_1, (21) shipping_telephone_2 o (22) shipping_fax hasta shopping-cart/checkout/; del par\u00e1metro (23) search_by en la p\u00e1gina admin/AddressesList.php en wp-admin/admin.php; del par\u00e1metro (24) address_id, (25) address_name, (26) firstname, (27) lastname, (28) street, (29) city, (30) postcode o del par\u00e1metro (31) email en la p\u00e1gina admin/AddressEdit.php en wp-admin/admin.php; del par\u00e1metro (32) post_id o (33) rel_type en la p\u00e1gina admin/AssignedCategoriesList.php en wp-admin/admin.php; o del par\u00e1metro (34) post_type en la p\u00e1gina admin/CustomFieldsList.php en wp-admin/admin.php."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:thecartpress:thecartpress_ecommerce_shopping_cart:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "F815780A-4B9C-45D5-86A6-AEE1D6E17FA3", "versionEndIncluding": "1.3.9"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}