Lucene search
WpvulndbWPVDB-ID:007A1695-7C05-414E-ABA8-8F7DCA24B3AAHistoryNov 30, 2022 - 12:00 a.m.
Custom Product Tabs for WooCommerce < 1.8.0 - Admin+ Stored XSS
2022-11-3000:00:00
wpscan.com
9
woocommerce
plugin
stored xss
admin
unsanitised settings
0.001 Low
EPSS
Percentile
22.9%
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| yikes-inc-easy-custom-woocommerce-product-tabs | lt | 1.8.0 |
Related
cvelist
cvelist
patchstack
patchstack
cnvd
cnvd
WordPress WooCommerce Cross-Site Scripting Vulnerability
2022-11-23 00:00:00
prion
prion
Cross site scripting
2022-11-18 19:15:00
cve
cve
CVE-2022-43463
2022-11-30 00:00:00
openvas
openvas
nvd
nvd
CVE-2022-43463
2022-11-18 19:15:31