CVE-2011-5104

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.

• getshopped wp e-commerce (<= 3.8.7.1) • getshopped wp e-commerce 3.6.5 • getshopped wp e-commerce 3.6.6 • getshopped wp e-commerce 3.6.7 • getshopped wp e-commerce 3.6.8 • getshopped wp e-commerce 3.6.9 • getshopped wp e-commerce 3.6.10 • getshopped wp e-commerce 3.6.11 • getshopped wp e-commerce 3.6.12 • getshopped wp e-commerce 3.6.13 • getshopped wp e-commerce 3.7 • getshopped wp e-commerce 3.7.1 • getshopped wp e-commerce 3.7.2 • getshopped wp e-commerce 3.7.3 • getshopped wp e-commerce 3.7.4 • getshopped wp e-commerce 3.7.5 • getshopped wp e-commerce 3.7.5.1 • getshopped wp e-commerce 3.7.5.2 • getshopped wp e-commerce 3.7.5.3 • getshopped wp e-commerce 3.7.6 • getshopped wp e-commerce 3.7.6.1 • getshopped wp e-commerce 3.7.6.2 • getshopped wp e-commerce 3.7.6.3 • getshopped wp e-commerce 3.7.6.4 • getshopped wp e-commerce 3.7.6.5 • getshopped wp e-commerce 3.7.6.6 • getshopped wp e-commerce 3.7.6.7 • getshopped wp e-commerce 3.7.6.9 • getshopped wp e-commerce 3.7.7 • getshopped wp e-commerce 3.7.8 • getshopped wp e-commerce 3.7.8.1 • getshopped wp e-commerce 3.7.8.2 • getshopped wp e-commerce 3.7.8.3 • getshopped wp e-commerce 3.8 • getshopped wp e-commerce 3.8.1 • getshopped wp e-commerce 3.8.2 • getshopped wp e-commerce 3.8.3 • getshopped wp e-commerce 3.8.4 • getshopped wp e-commerce 3.8.5 • getshopped wp e-commerce 3.8.6 • getshopped wp e-commerce 3.8.6.1 • getshopped wp e-commerce 3.8.7