Cpe:2.3:a:surecart:surecart:*:*:*:*:*:wordpress:*:*

The SureCart plugin for WordPress (<= 4.9.4) is vulnerable to Stored Cross-Site Scripting (XSS) via the comment parameter, allowing unauthenticated attackers to execute arbitrary scripts in the context of victims viewing specific e-commerce pages.