← Back

Boot Store

boot_store

Vendor: Thecartpress • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-4582
1Thecartpress
1Boot Store
Apr 30, 2025
Apr 28, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product.
CVE-2024-5938
1Thecartpress
1Boot Store
Apr 8, 2026
Jul 2, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitizat...Show more
The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less