← CVE Intelligence

CVE-2023-5952

Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection PUBLISHED

Description (CNA)

The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Injection when a suitable gadget is present on the blog

Affected (CNA)

Vendor / productVersions
Unknown / Welcart e-Commerceaffected 0 before 2.9.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.