Reflected XSS & Blind SQLi in wordpress plugin eshop v6.3.14

#908 · 2016-01-27

CVE ID(s): CVE-2016-0765, CVE-2016-0769

Notified: 2016-01-29

Description:

An accessible Shopping Cart plugin. eShop is an accessible shopping cart plugin for WordPress, packed with various features.

Exploit:

XSS CVE-2016-0765 
SQLI 2016-0769

Download: https://wordpress.org/plugins/eshop