Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:oceanwp:ocean_ecomm_treasure_box:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Stored XSS in Ocean Pro Demos and Ocean eComm Treasure Box WordPress Plugins

The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress are vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization in the Popup Builder's save_popup_content AJAX action.

Ocean Pro Demos +1 web-vulnerability wordpress xss
1t 1c