Welcart E-Commerce (Usc-E-Shop) Up to 2.12.6 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/welcart-e-commerce-usc-e-shop-up-to-2.12.6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 15:51:57 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWelcart e-Commerce: Stored Cross-site Scripting (CVE-2026-119505)https://feed.craftedsignal.io/briefs/2026-11-welcart-xss/Mon, 09 Nov 2026 15:51:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-welcart-xss/The Welcart e-Commerce plugin for usc-e-shop is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation.<p>The Welcart e-Commerce plugin (usc-e-shop) contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. This vulnerability allows Stored XSS and affects versions from n/a through 2.12.6.</p> highadvisory