Tag

Cve-2026-118070

1 brief RSS

Welcart e-Commerce: Stored Cross-Site Scripting (CVE-2026-118070)

The Welcart e-Commerce plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability via the 'gid' parameter, allowing unauthenticated attackers to execute arbitrary JavaScript in the administrative dashboard.

Welcart e-Commerce xss web-application wordpress cve-2026-118070

2t 1c 6m ago