Lucene search

K
cvelistWPScanCVELIST:CVE-2022-1673
HistoryJun 06, 2022 - 8:51 a.m.

CVE-2022-1673 WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout page

2022-06-0608:51:14
CWE-79
WPScan
www.cve.org
2
woocommerce
green wallet gateway
xss
vulnerability
wordpress plugin

EPSS

0.001

Percentile

40.2%

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the error_envision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability.

CNA Affected

[
  {
    "product": "WooCommerce Green Wallet Gateway",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.0.2",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

EPSS

0.001

Percentile

40.2%

Related for CVELIST:CVE-2022-1673