Lucene search
Krzysztof ZającWPEX-ID:53868650-ABA0-4D07-89D2-A998BB0EE5F6HistoryJan 10, 2022 - 12:00 a.m.
Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting
2022-01-1000:00:00
Krzysztof Zając
83
woocommerce
toolkit
reflected cross-site scripting
admin page
exploit
EPSS
0.001
Percentile
31.8%
The plugin does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=woo_st&tab=%3Cimg+src+onerror%3Dalert%281%29%3ERelated
cnvd
cnvd
wpvulndb
wpvulndb
Store Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting
2022-01-10 00:00:00
cvelist
cvelist
patchstack
patchstack
prion
prion
Cross site scripting
2022-02-07 16:15:00
nvd
nvd
CVE-2021-25077
2022-02-07 16:15:44
cve
cve
CVE-2021-25077
2022-02-07 16:15:44