CVE-2013-5978

Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Product name or (2) Price description fields via a request to wp-admin/admin.php. NOTE: This issue may only cross privilege boundaries if used in combination with CVE-2013-5977.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2013-10/0048.htmlBroken Link
• http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Forgery-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2013/Oct/52Mailing List, Third Party Advisory
• http://wordpress.org/plugins/cart66-lite/changelogRelease Notes, Third Party Advisory
• http://www.exploit-db.com/exploits/28959Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/62977Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87873Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2013-10/0048.htmlBroken Link
• http://packetstormsecurity.com/files/123587/WordPress-Cart66-1.5.1.14-Cross-Site-Request-Forgery-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/bugtraq/2013/Oct/52Mailing List, Third Party Advisory
• http://wordpress.org/plugins/cart66-lite/changelogRelease Notes, Third Party Advisory
• http://www.exploit-db.com/exploits/28959Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/62977Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87873Third Party Advisory, VDB Entry

Published

Dec 11, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5972VMware Workstation 9.x before 9.0.3 and VMware Player 5.x be…
• CVE-2013-5973VMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local …
• CVE-2013-5974Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-5975The access policy logon page (logon.inc) in F5 BIG-IP APM 11…
• CVE-2013-5976Cross-site scripting (XSS) vulnerability in the access polic…
• CVE-2013-5977Cross-site request forgery (CSRF) vulnerability in Cart66Pro…
• CVE-2013-5979Directory traversal vulnerability in Spring Signage Xibo 1.2…
• CVE-2013-5983Multiple cross-site scripting (XSS) vulnerabilities in GuppY…
• CVE-2013-5984Directory traversal vulnerability in userfiles/modules/admin…
• CVE-2013-5986Unspecified vulnerability in NVIDIA graphics driver Release …
• CVE-2013-5987Unspecified vulnerability in NVIDIA graphics driver Release …
• CVE-2013-5988A Cross-site Scripting (XSS) vulnerability exists in the All…6.1