Lucene search
WPScanCVELIST:CVE-2022-4629HistoryJan 23, 2023 - 2:31 p.m.
CVE-2022-4629 Product Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode
2023-01-2314:31:26
WPScan
www.cve.org
1
cve-2022-4629
stored xss
wordpress
EPSS
0.001
Percentile
25.5%
The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Product Slider for WooCommerce",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.6.4"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2022-4629
2023-01-23 15:15:15
cve
cve
CVE-2022-4629
2023-01-23 15:15:15
prion
prion
Cross site scripting
2023-01-23 15:15:00
wpexploit
wpexploit