Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.
2012-08-23T20:55:02.157
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | getshopped | wp_e-commerce | ≤ 3.8.7.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.9 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.10 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.11 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.12 | Yes |
| Application | getshopped | wp_e-commerce | 3.6.13 | Yes |
| Application | getshopped | wp_e-commerce | 3.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.2 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.3 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.4 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5.2 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.5.3 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.2 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.3 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.4 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.6.9 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.7 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.8.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.8.2 | Yes |
| Application | getshopped | wp_e-commerce | 3.7.8.3 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.2 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.3 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.4 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.5 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.6 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.6.1 | Yes |
| Application | getshopped | wp_e-commerce | 3.8.7 | Yes |
| Application | wordpress | wordpress | - | No |